Critical
Security advisory
GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogr_expat.cpp when the 10MB threshold is exceeded.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2019-17545
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 12:29 UTC · Revision 1
Source evidence
GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogr_expat.cpp when the 10MB threshold is exceeded.
osv:CVE-2019-17545
Complete source record
{
"id": "654545145f06b52496647e29b8cde5c713eb4fdc322ddf8a0b614f7797f45199",
"url": "https://osv.dev/vulnerability/CVE-2019-17545",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2019-17545",
"summary": "GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogr_expat.cpp when the 10MB threshold is exceeded.",
"evidence": "osv:CVE-2019-17545",
"products": [],
"severity": "critical",
"structured": {
"id": "CVE-2019-17545",
"aliases": [
"CVE-2019-17545",
"PYSEC-2019-241"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/osgeo/gdal",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"last_affected": "df36f287cc9df9e2be176c41971f110cc2f18cd7"
},
{
"fixed": "148115fcc40f1651a5d15fa34c9a8c528e7147bb"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:osgeo:gdal:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"last_affected": "3.0.1"
}
],
"source": "CPE_RANGE"
},
{
"range": [
{
"fixed": "148115fcc40f1651a5d15fa34c9a8c528e7147bb"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
}
],
"versions": [
"v3.0.1",
"v3.0.0",
"v2.4.0",
"v2.3.0beta1"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-17545.json",
"vanir_signatures": [
{
"id": "CVE-2019-17545-953d6849",
"digest": {
"length": 159,
"function_hash": "110395127982434165459425119816292298899"
},
"source": "https://github.com/osgeo/gdal/commit/148115fcc40f1651a5d15fa34c9a8c528e7147bb",
"target": {
"file": "gdal/ogr/ogr_expat.cpp",
"function": "OGRExpatRealloc"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2019-17545-bbef44bd",
"digest": {
"threshold": 0.9,
"line_hashes": [
"308229990210759106968400908252313392300",
"152172563583615806696898864395479245553",
"259181652519837524019465353356666549752",
"91935301074849414130272711771149295592"
]
},
"source": "https://github.com/osgeo/gdal/commit/148115fcc40f1651a5d15fa34c9a8c528e7147bb",
"target": {
"file": "gdal/ogr/ogr_expat.cpp"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-20T13:43:58Z"
}
}
],
"modified": "2026-10-20T13:43:58.048984629Z",
"provider": "osv",
"references": [
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CB7RRPCQP253XA5MYUOLHLRPKNGKVZNT/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVRC3EBQBFBVQC26XJE3AI3KQXC2NGTP/",
"https://lists.debian.org/debian-lts-announce/2019/11/msg00005.html",
"https://lists.debian.org/debian-lts-announce/2022/01/msg00004.html",
"https://lists.debian.org/debian-lts-announce/2022/09/msg00040.html",
"https://www.oracle.com//security-alerts/cpujul2021.html",
"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16178",
"https://github.com/OSGeo/gdal/commit/148115fcc40f1651a5d15fa34c9a8c528e7147bb"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
],
"vendor_product": "debian:debian_linux",
"extracted_events": [
{
"range": [
{
"introduced": "8.0"
},
{
"last_affected": "8.0"
},
{
"introduced": "9.0"
},
{
"last_affected": "9.0"
},
{
"introduced": "10.0"
},
{
"last_affected": "10.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*",
"cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*"
],
"vendor_product": "fedoraproject:fedora",
"extracted_events": [
{
"range": [
{
"introduced": "30"
},
{
"last_affected": "30"
},
{
"introduced": "31"
},
{
"last_affected": "31"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:*"
],
"vendor_product": "opensuse:backports_sle",
"extracted_events": [
{
"range": [
{
"introduced": "15.0-sp1"
},
{
"last_affected": "15.0-sp1"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*"
],
"vendor_product": "opensuse:leap",
"extracted_events": [
{
"range": [
{
"introduced": "15.1"
},
{
"last_affected": "15.1"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:spatial_and_graph:12.2.0.1:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:spatial_and_graph:19c:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:spatial_and_graph",
"extracted_events": [
{
"range": [
{
"introduced": "12.2.0.1"
},
{
"last_affected": "12.2.0.1"
},
{
"introduced": "19c"
},
{
"last_affected": "19c"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2019-17545",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 387998,
"published_at": "2019-10-14T02:15:11.03+00:00"
}