CVE-2026-4738

Published: Mar 24, 2026

Modified: Mar 24, 2026

PUBLISHED

Description

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in OSGeo gdal (frmts/zlib/contrib/infback9 modules). This vulnerability is associated with program files inftree9.C‎. This issue affects gdal: before 3.11.0.

Vendor	Product	Versions
OSGeo	gdal	affected `0 - < 3.11.0`

Weaknesses (CWE)

CWE-119

References

https://github.com/OSGeo/gdal/pull/12244

patch

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2026-4738

Description

Affected Products

Weaknesses (CWE)

References