CVE-2026-110661 Details
Description
CGNS through 4.5.2 contains a stack out-of-bounds read vulnerability in ADFI_read_node_header that allows attackers to crash applications by supplying crafted ADF node headers. Attackers can craft .cgns or .adf files whose non-NUL-terminated end tag causes ADFI_stridx_c to scan past disk_node_data, crashing tools like cgnslist.
A stack out-of-bounds read vulnerability has been identified in CGNS versions through 4.5.2. The issue arises in the ADFI_read_node_header function, where crafted ADF node headers can be used to manipulate the reading process. Attackers can create .cgns or .adf files with non-NUL-terminated end tags that cause the ADFI_stridx_c function to scan beyond the intended data, leading to a crash in applications. This vulnerability is present in the native ADF backend of CGNS and does not require HDF5.
The vulnerability can be fixed by replacing the unbounded substring search with a bounded comparison that respects the fixed length of the ADF tags. This change should be applied in the ADFI_read_node_header function, specifically at the tag validation checks.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 14, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-125 | Out-of-bounds Read | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| CGNS | <= 4.5.2 (semver) ~master |
CPE
Remediation
| |
Change History
1 change record found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 14, 2026 | New CVE Received | [email protected] |