Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-50126— adaguc-server GeoJSON coordinate parser (CConvertGeoJSON.cpp) vulnerable to out-of-bounds read and NULL pointer dereference

Quick assessment

Affected
KNMI adaguc-server
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Adaguc-server 是一个开源地理信息系统，用于通过 OGC 标准可视化、合并、比较和共享实时气象、气候和遥感数据。在 7.2.2 版本之前，当解析包含畸形坐标几何信息的 GeoJSON 文档时，该系统会因内存安全故障而崩溃。 在 文件中，坐标解析器直接索引 和 ，并使用 作为循环上限，但在此之前并未验证 JSON 节点类型或坐标长度。如果坐标是一个空数组、仅含一个元素的数组、标量值或 ，将导致堆越界读取或空指针解引用。 同样的未检查模式出现在四个几何分支中： （多边形）、 （线性字符串）、 （多线性字符串

CVSS 4.0 · Medium EPSS 0.12% · P3

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Affected Version Matrix 1

VendorProduct Version RangeStatus
KNMI adaguc-server < 7.2.2 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-50126

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
adaguc-server GeoJSON coordinate parser (CConvertGeoJSON.cpp) vulnerable to out-of-bounds read and NULL pointer dereference
Source: CVE Program / CVE List V5
Vulnerability Description
Adaguc-server is an open source geographical information system to visualize, combine, compare and share real-time meteorological, climatological and remote sensing data via OGC standards. Versions prior to 7.2.2 crash with a memory-safety fault when it parses a GeoJSON document whose geometry contains a malformed coordinate. The coordinate parser in `adagucserverEC/CConvertGeoJSON.cpp` indexes `pt.u.array.values[0]` and `pt.u.array.values[1]` and uses `polygon.u.array.length` as a loop bound without first validating the JSON node type or the coordinate length. A coordinate that is an empty array, a one-element array, a scalar, or `null` leads to an out-of-bounds heap read or a NULL pointer dereference. The same unchecked pattern is present in four geometry branches: `Polygon`, `LineString`, `MultiLineString` and `MultiPolygon`. The vulnerable parser runs whenever the server processes a local GeoJSON file, either a configured GeoJSON dataset or a GeoJSON file exposed through the `AutoResource` feature and requested by an unauthenticated WMS request. A crafted GeoJSON file reliably crashes the backend process that handles that request. Version 7.2.2 patches the vulnerability.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存读
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
KNMI adaguc-server < 7.2.2 -

II. Public POCs for CVE-2026-50126

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-50126

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-50126 (2)

Vendor Advisories for CVE-2026-50126 (1)

Vendor Pages for CVE-2026-50126 (1)

IV. Related Vulnerabilities

Same weakness: CWE-125

V. Comments for CVE-2026-50126

No comments yet

Leave a comment