CVE-2026-4738

Critical

Published: 24/03/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

An Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in gdal (frmts/zlib/contrib/infback9 modules) associated with the inftree9.C file. This issue affects gdal before version 3.11.0.

Risk Assessment

The flaw could lead to program crash or potentially arbitrary code execution, posing a risk to systems processing geospatial data.

Recommendation

Update gdal to version 3.11.0 or later, which includes the fix.

Original NVD description (English source)

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in OSGeo gdal (frmts/zlib/contrib/infback9 modules). This vulnerability is associated with program files inftree9.C‎. This issue affects gdal: before 3.11.0.