GD
Product
gdal
by OSGeo · last CVE May 27, 2026
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 5Medium 6Low 0
Watch

Add gdal to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-17545
9.8
3%
Oct 14
GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogr_expat.cpp when the 10MB threshold is exceeded
Affected: through 3.0.1
CVE-2026-4738
9.4
0%
Mar 24
GDAL Bundled zlib (inftree9.c) Pointer Offset Optimization Undefined Behavior Allows Heap Corruption or Remote Code Execution
Affected: before 3.11.0
Showing 2