Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2019-25050

Quick assessment

Affected

n/a n/a

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

GDAL是一款开源的地理空间数据抽象库。 GDAL存在安全漏洞，该漏洞源于一个基于堆栈的缓冲区溢出。

AI Predicted 7.5 Difficulty: Hard EPSS 0.35% · P29 Updated Feb 23, 2026

Possible ATT&CK Techniques 1 AI

T1203 · Exploitation for Client Execution

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2019-25050

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

netCDF in GDAL 2.4.2 through 3.0.4 has a stack-based buffer overflow in nc4_get_att (called from nc4_get_att_tc and nc_get_att_text) and in uffd_cleanup (called from netCDFDataset::~netCDFDataset and netCDFDataset::~netCDFDataset).

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

N/A

Source: CVE Program / CVE List V5

Vulnerability Title

GDAL 缓冲区错误漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

GDAL是一款开源的地理空间数据抽象库。 GDAL存在安全漏洞，该漏洞源于一个基于堆栈的缓冲区溢出。

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2019-25050

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2019-25050

请登录查看更多情报信息。

Patches & Fixes for CVE-2019-25050 (2)

https://github.com/OSGeo/gdal/commit/767e3a56144f676ca738ef8f700e0e56035bd05a x_refsource_MISC
https://github.com/OSGeo/gdal/commit/27b9bf644bcf1208f7d6594bdd104cc8a8bb0646 x_refsource_MISC

Other References for CVE-2019-25050 (3)

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15143 x_refsource_MISC
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/gdal/OSV-2020-420.yaml x_refsource_MISC
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15156 x_refsource_MISC

https://www.cve.org/CVERecord?id=CVE-2019-25050

Same Patch Batch · n/a · 2021-07-20 · 26 CVEs total

CVE-2021-27021		Puppet SQL注入漏洞
CVE-2021-36980		Open vSwitch 资源管理错误漏洞
CVE-2021-36978		QPDF 缓冲区错误漏洞
CVE-2021-3246		libsndfile 缓冲区错误漏洞
CVE-2019-25051		GNU Aspell 缓冲区错误漏洞
CVE-2020-36431		Unicorn Engine 缓冲区错误漏洞
CVE-2020-36430		libass 缓冲区错误漏洞
CVE-2020-36429		open62541 缓冲区错误漏洞
CVE-2020-36428		MAT File I/O Library 缓冲区错误漏洞
CVE-2021-36979		Unicorn Engine 缓冲区错误漏洞
CVE-2021-36977		MAT File I/O Library 缓冲区错误漏洞
CVE-2021-36976		libarchive 资源管理错误漏洞
CVE-2021-35054		Minecraft 路径遍历漏洞
CVE-2021-36230		HashiCorp Terraform 授权问题漏洞
CVE-2020-15660		geckodriver 跨站请求伪造漏洞
CVE-2021-27517		Foxit PDF SDK For Web 跨站脚本漏洞
CVE-2021-27338		Faraday Edge 跨站脚本漏洞
CVE-2020-35427		Teachers Record Management System SQL注入漏洞
CVE-2021-33909		Linux kernel 输入验证错误漏洞
CVE-2021-33910		systemd 安全漏洞

Showing top 20 of 26 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a

Same vendor: n/a