Easily map the attack path and prioritize which CVEs are a threat to your organization
Miggo AIGenerate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| resdata | pip | < 6.2.9 | 6.2.9 |
Miggo AIRoot Cause AnalysisThe vulnerability in resdata prior to version 6.2.9 is a combination of several issues related to parsing GRDECL files. The core of the problem lies in the lack of input validation and bounds checking when processing various keywords and data within these files. The identified vulnerable functions, rd_grid_alloc_GRDECL_kw__, rd_grid_alloc_GRDECL_kw, and fscanf_alloc_grdecl_data, are all involved in parsing GRDECL data. The patches introduce size checks for keywords like COORD, ZCORN, ACTNUM, MAPAXES, and CORSNUM, and also add size specifiers to sscanf calls to prevent buffer overflows. These changes collectively mitigate the risks of buffer overflows, out-of-bounds reads, and potential null pointer dereferences that could be triggered by a malicious GRDECL file.
rd_grid_alloc_GRDECL_kw__lib/resdata/rd_grid.cpp
rd_grid_alloc_GRDECL_kwlib/resdata/rd_grid.cpp
fscanf_alloc_grdecl_datalib/resdata/rd_kw_grdecl.cpp