{"id":"CVE-2026-53877","aliases":["GHSA-crhf-3pfg-w68w","BIT-django-2026-53877","PYSEC-2026-2091"],"title":" Django: GDALRaster may over-read heap memory when constructed from bytes","summary":" Django: GDALRaster may over-read heap memory when constructed from bytes","severity":"medium","cvss":4.8,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","vendor":"django","product":"django","ecosystem":"pip","affected":["django < 5.2.16","django >= 6.0.0, < 6.0.7"],"patched":["django 5.2.16","django 6.0.7"],"published":"2026-07-07","updated":"2026-09-10","sourceUpdated":"2026-09-10T03:51:11.475072075Z","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-crhf-3pfg-w68w","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53877"},{"url":"https://github.com/django/django/commit/38dfbd27d7d4f4e6eaa087d7a90f2613fbf55b3a"},{"url":"https://github.com/django/django/commit/6c66eb8cec52b303af85c2c6e4dd00aa37654dbc"},{"url":"https://github.com/django/django/commit/6ca2bbe2efce21010eff48f1f36a3f621d698ed8"},{"url":"https://docs.djangoproject.com/en/dev/releases/security"},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2026-2091.yaml"},{"url":"https://groups.google.com/g/django-announce"},{"url":"https://www.djangoproject.com/weblog/2026/jul/07/security-releases"},{"url":"https://docs.djangoproject.com/en/dev/releases/security/"},{"url":"https://www.djangoproject.com/weblog/2026/jul/07/security-releases/"}],"tags":["osv","pip"],"epss":0.00437,"epssPercentile":0.37323,"ingestedAt":"2026-07-10T18:56:50.632Z","slug":"CVE-2026-53877","body":"## Overview\n\nAn issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16.\n`django.contrib.gis.gdal.GDALRaster` over-reads its in-memory buffer when constructed from a bytes object, which can disclose adjacent memory or cause service degradation via a potential segmentation fault when the `vsi_buffer` property is accessed.\nEarlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected.\nDjango would like to thank Bence Nagy for reporting this issue.\n\n## Affected packages\n\n- `django < 5.2.16`\n- `django >= 6.0.0, < 6.0.7`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `django 5.2.16`\n- `django 6.0.7`","depth":"sunlit","depthScore":26,"depthScoreParts":{"impact":26.4,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":201757,"id":"CVE-2026-53877","ts":1789399675143,"field":"cvss","old":null,"new":"4.8"},{"seq":201756,"id":"CVE-2026-53877","ts":1789399675143,"field":"severity","old":"none","new":"medium"},{"seq":200487,"id":"CVE-2026-53877","ts":1789397340266,"field":"cvss","old":"4.8","new":null},{"seq":200486,"id":"CVE-2026-53877","ts":1789397340266,"field":"severity","old":"medium","new":"none"},{"seq":198404,"id":"CVE-2026-53877","ts":1789391901733,"field":"cvss","old":null,"new":"4.8"},{"seq":198403,"id":"CVE-2026-53877","ts":1789391901733,"field":"severity","old":"none","new":"medium"},{"seq":196198,"id":"CVE-2026-53877","ts":1789383547360,"field":"cvss","old":"4.8","new":null},{"seq":196197,"id":"CVE-2026-53877","ts":1789383547360,"field":"severity","old":"medium","new":"none"},{"seq":195127,"id":"CVE-2026-53877","ts":1789380424852,"field":"cvss","old":null,"new":"4.8"},{"seq":195126,"id":"CVE-2026-53877","ts":1789380424852,"field":"severity","old":"none","new":"medium"},{"seq":193914,"id":"CVE-2026-53877","ts":1789378442279,"field":"cvss","old":"4.8","new":null},{"seq":193913,"id":"CVE-2026-53877","ts":1789378442279,"field":"severity","old":"medium","new":"none"},{"seq":192701,"id":"CVE-2026-53877","ts":1789376374915,"field":"cvss","old":null,"new":"4.8"},{"seq":192700,"id":"CVE-2026-53877","ts":1789376374915,"field":"severity","old":"none","new":"medium"},{"seq":191488,"id":"CVE-2026-53877","ts":1789373352281,"field":"cvss","old":"4.8","new":null},{"seq":191487,"id":"CVE-2026-53877","ts":1789373352281,"field":"severity","old":"medium","new":"none"},{"seq":190273,"id":"CVE-2026-53877","ts":1789369259588,"field":"cvss","old":null,"new":"4.8"},{"seq":190272,"id":"CVE-2026-53877","ts":1789369259588,"field":"severity","old":"none","new":"medium"},{"seq":189060,"id":"CVE-2026-53877","ts":1789368226477,"field":"cvss","old":"4.8","new":null},{"seq":189059,"id":"CVE-2026-53877","ts":1789368226477,"field":"severity","old":"medium","new":"none"},{"seq":187843,"id":"CVE-2026-53877","ts":1789365117399,"field":"cvss","old":null,"new":"4.8"},{"seq":187842,"id":"CVE-2026-53877","ts":1789365117399,"field":"severity","old":"none","new":"medium"},{"seq":186630,"id":"CVE-2026-53877","ts":1789363220062,"field":"cvss","old":"4.8","new":null},{"seq":186629,"id":"CVE-2026-53877","ts":1789363220062,"field":"severity","old":"medium","new":"none"},{"seq":185416,"id":"CVE-2026-53877","ts":1789361064622,"field":"cvss","old":null,"new":"4.8"},{"seq":185415,"id":"CVE-2026-53877","ts":1789361064622,"field":"severity","old":"none","new":"medium"},{"seq":184203,"id":"CVE-2026-53877","ts":1789358098515,"field":"cvss","old":"4.8","new":null},{"seq":184202,"id":"CVE-2026-53877","ts":1789358098515,"field":"severity","old":"medium","new":"none"},{"seq":182454,"id":"CVE-2026-53877","ts":1789354192384,"field":"cvss","old":null,"new":"4.8"},{"seq":182453,"id":"CVE-2026-53877","ts":1789354192384,"field":"severity","old":"none","new":"medium"},{"seq":181247,"id":"CVE-2026-53877","ts":1789353080793,"field":"cvss","old":"4.8","new":null},{"seq":181246,"id":"CVE-2026-53877","ts":1789353080793,"field":"severity","old":"medium","new":"none"},{"seq":180040,"id":"CVE-2026-53877","ts":1789350136070,"field":"cvss","old":null,"new":"4.8"},{"seq":180039,"id":"CVE-2026-53877","ts":1789350136070,"field":"severity","old":"none","new":"medium"},{"seq":178833,"id":"CVE-2026-53877","ts":1789348044885,"field":"cvss","old":"4.8","new":null},{"seq":178832,"id":"CVE-2026-53877","ts":1789348044885,"field":"severity","old":"medium","new":"none"},{"seq":177626,"id":"CVE-2026-53877","ts":1789346253363,"field":"cvss","old":null,"new":"4.8"},{"seq":177625,"id":"CVE-2026-53877","ts":1789346253363,"field":"severity","old":"none","new":"medium"},{"seq":176419,"id":"CVE-2026-53877","ts":1789342967894,"field":"cvss","old":"4.8","new":null},{"seq":176418,"id":"CVE-2026-53877","ts":1789342967894,"field":"severity","old":"medium","new":"none"},{"seq":174536,"id":"CVE-2026-53877","ts":1789334731316,"field":"cvss","old":null,"new":"4.8"},{"seq":174535,"id":"CVE-2026-53877","ts":1789334731316,"field":"severity","old":"none","new":"medium"},{"seq":173331,"id":"CVE-2026-53877","ts":1789333449120,"field":"cvss","old":"4.8","new":null},{"seq":173330,"id":"CVE-2026-53877","ts":1789333449120,"field":"severity","old":"medium","new":"none"},{"seq":172145,"id":"CVE-2026-53877","ts":1789330971442,"field":"cvss","old":null,"new":"4.8"},{"seq":172144,"id":"CVE-2026-53877","ts":1789330971442,"field":"severity","old":"none","new":"medium"},{"seq":170959,"id":"CVE-2026-53877","ts":1789328556181,"field":"cvss","old":"4.8","new":null},{"seq":170958,"id":"CVE-2026-53877","ts":1789328556181,"field":"severity","old":"medium","new":"none"},{"seq":169754,"id":"CVE-2026-53877","ts":1789327036152,"field":"cvss","old":null,"new":"4.8"},{"seq":169753,"id":"CVE-2026-53877","ts":1789327036152,"field":"severity","old":"none","new":"medium"}]}