High
Security advisory
netCDF in GDAL 2.4.2 through 3.0.4 has a stack-based buffer overflow in nc4_get_att (called from nc4_get_att_tc and nc_get_att_text) and in uffd_cleanup (called from netCDFDataset::~netCDFDataset and netCDFDataset::~netCDFDataset).
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2019-25050
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 12:35 UTC · Revision 1
Source evidence
netCDF in GDAL 2.4.2 through 3.0.4 has a stack-based buffer overflow in nc4_get_att (called from nc4_get_att_tc and nc_get_att_text) and in uffd_cleanup (called from netCDFDataset::~netCDFDataset and netCDFDataset::~netCDFDataset).
osv:CVE-2019-25050
Complete source record
{
"id": "53cdcb345bcc1b09b76cdc5f1d2207cdcb311d0fc916540f47382d51db064f32",
"url": "https://osv.dev/vulnerability/CVE-2019-25050",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2019-25050",
"summary": "netCDF in GDAL 2.4.2 through 3.0.4 has a stack-based buffer overflow in nc4_get_att (called from nc4_get_att_tc and nc_get_att_text) and in uffd_cleanup (called from netCDFDataset::~netCDFDataset and netCDFDataset::~netCDFDataset).",
"evidence": "osv:CVE-2019-25050",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2019-25050",
"aliases": [
"CVE-2019-25050",
"PYSEC-2021-888"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/osgeo/gdal",
"type": "GIT",
"events": [
{
"introduced": "825662d03251faac29c5c683c74694ba56124e90"
},
{
"last_affected": "ee535a1a3f5b35b0d231e1faac89ac1f889f7988"
},
{
"fixed": "27b9bf644bcf1208f7d6594bdd104cc8a8bb0646"
},
{
"fixed": "767e3a56144f676ca738ef8f700e0e56035bd05a"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:osgeo:gdal:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.4.2"
},
{
"last_affected": "3.0.4"
}
],
"source": "CPE_RANGE"
},
{
"range": [
{
"fixed": "27b9bf644bcf1208f7d6594bdd104cc8a8bb0646"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "767e3a56144f676ca738ef8f700e0e56035bd05a"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
}
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-25050.json",
"vanir_signatures": [
{
"id": "CVE-2019-25050-112c1677",
"digest": {
"threshold": 0.9,
"line_hashes": [
"182114019274330504405524429607708237822",
"260345988463686926761865667168934854869",
"281242935202487707059003033430704216315",
"223919040550938216905341524769853078179"
]
},
"source": "https://github.com/osgeo/gdal/commit/27b9bf644bcf1208f7d6594bdd104cc8a8bb0646",
"target": {
"file": "gdal/ogr/ogrsf_frmts/kml/ogrkmllayer.cpp"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2019-25050-883d9465",
"digest": {
"length": 387,
"function_hash": "302002118971741846913773595126247519048"
},
"source": "https://github.com/osgeo/gdal/commit/767e3a56144f676ca738ef8f700e0e56035bd05a",
"target": {
"file": "gdal/frmts/netcdf/netcdfsg.cpp",
"function": "attrf"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2019-25050-bb04300f",
"digest": {
"length": 1654,
"function_hash": "35271287751527571686749642692254647707"
},
"source": "https://github.com/osgeo/gdal/commit/27b9bf644bcf1208f7d6594bdd104cc8a8bb0646",
"target": {
"file": "gdal/ogr/ogrsf_frmts/kml/ogrkmllayer.cpp",
"function": "OGRKMLLayer::OGRKMLLayer"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2019-25050-df3c9cf9",
"digest": {
"threshold": 0.9,
"line_hashes": [
"330050799991627139372582363810828850986",
"43288583624019282758956658056096911854",
"133106679127093124975071662172322506616",
"61584344147969714699023128396183080815",
"29247339718509823662230292100691496337",
"70259280790122801849175533546147055310",
"197632885844845454462511212044286891895",
"219460695381383478241253996762517383813",
"274345183051428644925453191461116232451",
"865604286249530944125010970242137511",
"161961644178719221901322991508777035874",
"156670885929672163293618591419657972737",
"213942214105901386467656383532137497463",
"246811575906086634005411652434159240053",
"63473041997612762628719516071506648911",
"209170788878360836903109474419753571184",
"137639027989884651640185728037995258365"
]
},
"source": "https://github.com/osgeo/gdal/commit/767e3a56144f676ca738ef8f700e0e56035bd05a",
"target": {
"file": "gdal/frmts/netcdf/netcdfsg.cpp"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-20T13:55:58Z"
}
}
],
"modified": "2026-10-20T13:55:58.678267034Z",
"provider": "osv",
"references": [
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/gdal/OSV-2020-392.yaml",
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/gdal/OSV-2020-420.yaml",
"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15143",
"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15156",
"https://github.com/OSGeo/gdal/commit/27b9bf644bcf1208f7d6594bdd104cc8a8bb0646",
"https://github.com/OSGeo/gdal/commit/767e3a56144f676ca738ef8f700e0e56035bd05a"
],
"provider_metadata": {}
},
"related_cves": [
{
"value": "CVE-2019-25050",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 388395,
"published_at": "2021-07-20T07:15:07.603+00:00"
}