CVE-2026-35001 Details

A heap-based buffer overflow vulnerability has been identified in OpenS100 versions through commit 2b1dafc, specifically within the S-102 Bathymetric Surface parser. The vulnerability arises from an integer overflow in the S102_VG_BathymetryCoverage::Read() function, where grid dimension metadata from a crafted S-102 HDF5 file is improperly validated. This flaw allows an attacker to manipulate the metadata, leading to memory corruption when the file is opened. The unchecked multiplication of latitudinal and longitudinal point values can cause a 32-bit integer overflow, resulting in an inadequate heap buffer allocation. Exploitation of this vulnerability allows for memory writes beyond the allocated buffer, causing a heap-based buffer overflow that could crash the application or potentially enable arbitrary code execution in the context of the user who opened the file.