CVE-2025-29480
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Apr 7, 2025
Updated: Apr 15, 2025
CWE ID 120
Summary
CVE-2025-29480 is a buffer overflow vulnerability affecting gdal version 3.10.2. An attacker can exploit this flaw in the OGRSpatialReference::Release function to cause a denial of service. By sending specially crafted input data, a local adversary can trigger the buffer overflow and disrupt the normal functioning of the application. This issue poses a significant risk, especially for organizations and individuals relying on gdal for handling geospatial data. It is advisable to apply the available patch or update to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.