Is CVE-2026-8212 actively exploited?

No active exploitation of CVE-2026-8212 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-8212 be exploited remotely?

No. CVE-2026-8212 requires local access to exploit.

What is the CVSS score of CVE-2026-8212?

CVE-2026-8212 has a CVSS score of 5.3 (MEDIUM).

HOME VULNERABILITIESCVE-2026-8212

MEDIUM

CVE-2026-8212

CWE-119Published: May 9, 2026· Updated: May 13, 2026

5.3

CVSS v3.1

EPSS:0.01%probability of exploitation in 30 daysPercentile:2.1th

Official Description

A flaw has been found in OSGeo gdal up to 3.13.0dev-4. Affected by this vulnerability is the function SWSDfldsrch of the file frmts/hdf4/hdf-eos/SWapi.c. Executing a manipulation can lead to heap-based buffer overflow. The attack requires local access. The exploit has been published and may be used. Upgrading to version 3.13.0RC1 addresses this issue. This patch is called 3e04c0385630e4d42517046d9a4967dfccfeb7fd. The affected component should be upgraded.

NVD Source

Technical Analysis

CVE-2026-8212 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

From a weakness classification perspective (CWE-119): Buffer overflow vulnerabilities can lead to arbitrary code execution or denial of service by corrupting adjacent memory.