Junglewise Threat Intelligence
CVE-2019-25050: PYSEC-2021-888 - netCDF in GDAL 2.4.2 through 3.0.4 has a stack-based buffer overflow in nc4_get_att (called from nc4_get_att_tc and nc_get_att_text) and in
CVE-2019-25050 · Severity: low · CVSS 3.1 · Published 2021-07-20
Technologies: GDAL (PyPI). Vendors: PyPI.
Executive brief
netCDF in GDAL 2.4.2 through 3.0.4 has a stack-based buffer overflow in nc4_get_att (called from nc4_get_att_tc and nc_get_att_text) and in uffd_cleanup (called from netCDFDataset::~netCDFDataset and netCDFDataset::~netCDFDataset).