CVE-2026-4738

GDAL Bundled zlib (inftree9.c) Pointer Offset Optimization Undefined Behavior Allows Heap Corruption or Remote Code Execution PUBLISHED

Description (CNA)

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in OSGeo gdal (frmts/zlib/contrib/infback9 modules). This vulnerability is associated with program files inftree9.C‎. This issue affects gdal: before 3.11.0.

Affected (CNA)

Vendor / product	Versions
OSGeo / gdal	affected 0 before 3.11.0

CWE

CWE-119

References

https://github.com/OSGeo/gdal/pull/12244

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.