CVE-2025-29480: PYSEC-2025-117 - Buffer Overflow vulnerability in gdal 3.10.2 allows a local attacker to cause a denial of service via the OGRSpatialReference::Release funct

CVE-2025-29480 · Severity: low · CVSS 3.1 · Published 2025-04-07

Technologies: GDAL (PyPI). Vendors: PyPI.

Executive brief

Buffer Overflow vulnerability in gdal 3.10.2 allows a local attacker to cause a denial of service via the OGRSpatialReference::Release function. NOTE: the Supplier indicates that the report is invalid and could not be reproduced.

Affected products

PyPI GDAL

Related threats

OSGeo GDAL stack buffer overflow in netCDF driver
OSGeo GDAL heap buffer overflow in Grid File Handler
OSGeo GDAL heap buffer overflow in SWSDfldsrch
OSGeo GDAL out-of-bounds read in GDfieldinfo
OSGeo GDAL heap buffer overflow in HDF4-EOS driver