CVE-2026-33721mediumCWE-787

CVE-2026-33721: fallo de gravedad media en MapServer

MapServer has heap buffer overflow in SLD `Categorize` Threshold parsing

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear MapServer+ Monitorear mapserver

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 5.3epss 1.2%
MapServer is a system for developing web-based GIS applications. Starting in version 4.2 and prior to version 8.6.1, a heap-buffer-overflow write in MapServer’s SLD (Styled Layer Descriptor) parser lets a remote, unauthenticated attacker crash the MapServer process by sending a crafted SLD with more than 100 Threshold elements inside a ColorMap/Categorize structure (commonly reachable via WMS GetMap with SLD_BODY). Version 8.6.1 patches the issue.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Productos afectados
MapServer · MapServer
CVEs relacionadas — MapServer

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-54354HIGHMapServer: PostGIS Numeric Filter Value SQL Injection in MapServer Runtime Query TranslationEPSS 0.7%CVE-2026-54355MEDIUMMapServer: Reflected XSS in OpenLayers HTML Output via `HTTP_X_FORWARDED_HOST`EPSS 0.5%CVE-2025-59431HIGHMapServer - WFS XML Filter Query SQL injectionEPSS 0.4%CVE-2026-45104HIGHMapServer: NULL pointer dereference in SLD `<ElseFilter>` rule parsing reachable via WMS `SLD_BODY`EPSS 0.3%CVE-2026-42030MEDIUMMapServer: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in OpenLayers viewerEPSS 0.2%