CNNVD-202601-2960 Information
Jan 18, 2026
cve
CNNVD ID
CNNVD-202601-2960
Related CVE
- CNNVD Published: 2026-01-18
Description (Chinese)
Mapnik是Mapnik开源的一个用于开发地图应用程序的开源工具包。 Mapnik 4.2.0及之前版本存在安全漏洞，该漏洞源于plugins/input/shape/dbfile.cpp文件中mapnik::dbf_file::string_value函数存在堆缓冲区溢出，可能导致本地攻击。
Description (English)
Mapnik is an open source toolkit for Mapnik development of map applications. There is a security loophole in Mapnik 4.2.0 and previous versions, which stems from the pugins/input/shape/dbfile.cpp document mapnik::dbf file::string value, which can lead to local attacks.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
Mapnik
Published
2026-01-18
Last Modified
2026-02-24
References
https://github.com/mapnik/mapnik/issues/4543 https://github.com/oneafter/1218/blob/main/repro https://vuldb.com/?ctiid.341709 https://vuldb.com/?id.341709 https://vuldb.com/?submit.733348
Share on: