CVE-2026-50126
MediumCVSS 4.0Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
Adaguc-server before version 7.2.2 contains a vulnerability causing a crash with a memory-safety fault when parsing a GeoJSON document with a malformed coordinate. The parser indexes array values without validating the JSON node type or coordinate length, leading to an out-of-bounds read or NULL pointer dereference. The issue affects the Polygon, LineString, MultiLineString, and MultiPolygon geometry branches.
Risk Assessment
A remote unauthenticated attacker can send a crafted GeoJSON file, causing a crash of the backend process handling the WMS request, leading to denial of service.
Recommendation
Upgrade Adaguc-server to version 7.2.2 or later, which includes a fix for this vulnerability.
Original NVD description (English source)
Adaguc-server is an open source geographical information system to visualize, combine, compare and share real-time meteorological, climatological and remote sensing data via OGC standards. Versions prior to 7.2.2 crash with a memory-safety fault when it parses a GeoJSON document whose geometry contains a malformed coordinate. The coordinate parser in `adagucserverEC/CConvertGeoJSON.cpp` indexes `pt.u.array.values[0]` and `pt.u.array.values[1]` and uses `polygon.u.array.length` as a loop bound without first validating the JSON node type or the coordinate length. A coordinate that is an empty array, a one-element array, a scalar, or `null` leads to an out-of-bounds heap read or a NULL pointer dereference. The same unchecked pattern is present in four geometry branches: `Polygon`, `LineString`, `MultiLineString` and `MultiPolygon`. The vulnerable parser runs whenever the server processes a local GeoJSON file, either a configured GeoJSON dataset or a GeoJSON file exposed through the `AutoResource` feature and requested by an unauthenticated WMS request. A crafted GeoJSON file reliably crashes the backend process that handles that request. Version 7.2.2 patches the vulnerability.