Fedora Account System
Red Hat Associate
Red Hat Customer
A flaw was found in Django. When django.contrib.gis.gdal.GDALRaster is instantiated with a bytes object representing a raster file, the vsi_buffer property can read approximately 32 bytes beyond the allocated buffer. This may disclose adjacent heap memory or, in rare cases, cause a segmentation fault.
Created attachment 2147812 [details] 0002-5.2.x-Fixed-CVE-2026-53877-Prevented-heap-buffer-ove.patch
Created attachment 2147813 [details] 0002-6.0.x-Fixed-CVE-2026-53877-Prevented-heap-buffer-ove.patch
Created attachment 2147814 [details] 0002-6.1.x-Fixed-CVE-2026-53877-Prevented-heap-buffer-ove.patch
Created attachment 2147815 [details] 0002-Fixed-CVE-2026-53877-Prevented-heap-buffer-over-read.patch