{"id":"CVE-2026-55209","summary":"resdata insufficiently validates untrusted GRDECL files","details":"resdata is software for reading and writing result files from the Eclipse reservoir simulator. Prior to 6.2.9, resdata insufficiently validates numeric fields, grid dimensions, keyword sizes, and array indexes while parsing untrusted GRDECL files in lib/resdata/rd_kw_grdecl.cpp and lib/resdata/rd_grid.cpp. Malformed COORD, ZCORN, CORSNUM, ACTNUM, or MAPAXES data can reach rd_grid_alloc_GRDECL_kw__ with inconsistent lengths, while unbounded floating-point conversion can exceed the intended parser buffer. In a network service that accepts untrusted GRDECL files, these conditions can cause a classic buffer overflow, out-of-bounds reads, invalid array access, NULL pointer dereference, memory corruption, or service termination. This issue is fixed in version 6.2.9.","aliases":["GHSA-pr85-w493-9w3x","PYSEC-2026-3694"],"modified":"2026-10-28T11:14:55.712366100Z","published":"2026-09-14T19:52:24.518Z","database_specific":{"cna_assigner":"GitHub_M","cwe_ids":["CWE-120","CWE-125","CWE-129","CWE-476"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/55xxx/CVE-2026-55209.json"},"references":[{"type":"WEB","url":"https://github.com/equinor/resdata/releases/tag/6.2.9"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/55xxx/CVE-2026-55209.json"},{"type":"ADVISORY","url":"https://github.com/equinor/resdata/security/advisories/GHSA-pr85-w493-9w3x"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55209"},{"type":"FIX","url":"https://github.com/equinor/resdata/commit/9f8fd6db472e0696080b768389914d60a453904f"},{"type":"FIX","url":"https://github.com/equinor/resdata/commit/d3f45828e9413506b8e8160a9304f4b7b06dcefc"},{"type":"FIX","url":"https://github.com/equinor/resdata/commit/ee8cc12b026d945df3077bc98e211ee45f80a433"},{"type":"FIX","url":"https://github.com/equinor/resdata/pull/1166"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/equinor/resdata","events":[{"introduced":"0"},{"fixed":"b1fb1c1c8d3814c09fa6c5e6ee75fd90a10d1916"},{"fixed":"9f8fd6db472e0696080b768389914d60a453904f"},{"fixed":"d3f45828e9413506b8e8160a9304f4b7b06dcefc"},{"fixed":"ee8cc12b026d945df3077bc98e211ee45f80a433"}],"database_specific":{"extracted_events":[{"strategy":"StringRangeExpression","range":[{"introduced":"0"},{"fixed":"6.2.9"}],"source":"AFFECTED_FIELD"},{"range":[{"fixed":"9f8fd6db472e0696080b768389914d60a453904f"}],"source":"REFERENCES_COMMIT"},{"range":[{"fixed":"d3f45828e9413506b8e8160a9304f4b7b06dcefc"}],"source":"REFERENCES_COMMIT"},{"range":[{"fixed":"ee8cc12b026d945df3077bc98e211ee45f80a433"}],"source":"REFERENCES_COMMIT"},{"original_tag":"6.2.9","range":[{"fixed":"b1fb1c1c8d3814c09fa6c5e6ee75fd90a10d1916"}],"source":"REFERENCES_TAG"}]}}],"versions":["6.2.8","6.2.7","6.2.6","6.2.5","6.2.4","6.2.3","6.2.2","6.2.1","6.2.0","6.1.0","6.0.1","6.0.0","5.1.3","5.1.2","5.1.1","5.1.0","5.0.3","5.0.2","5.0.1","5.0.0","5.0.0-b0","4.2.4","4.2.3","4.2.2","4.2.1","4.2.0","4.1.1","4.1.0","4.0.0","3.0.1","3.0.0","2.14.3","2.14.2","2.14.1","2.14.0","2.13.2","2.13.1","2.13.0","2.12.0","2.11.0-rc1","2.11.0","2.11.0-rc0","v2.10.1","2.10.1","2.9.5","2.10.0","2.9.4","2.9.3rc0","2.9.3","2.9.2","2.9.2rc1","2.9.2b0","2.9.1","2.9.0","2.8.0","2.8.0a2","2.8.0a0","2.7.rc0","2.7.0","2.6.0","2.5.rc2","2.5.0","2.5.rc1","2.5.rc0","2.5.b1","2.5.b0","2.5.a2","2.5.a1","2.5.a0","2.4.b1","2.4.a1","2.3.rc4","2.3.rc3","2.3.rc2","2.3.rc1","2.3.b3","2.3.b2","2.3.b1","2.3.a17","2.3.a12","2.3.a9","2.3.a11","2.3.a10","2.3a8","2.3.a7","2.3.a6","2.3.a5","2.3.a4","2.3.a3","2.3.a2","2.3.a1"],"database_specific":{"vanir_signatures":[{"id":"CVE-2026-55209-03fae407","signature_type":"Function","signature_version":"v1","source":"https://github.com/equinor/resdata/commit/9f8fd6db472e0696080b768389914d60a453904f","target":{"function":"rd_grid_alloc_GRDECL_kw__","file":"lib/resdata/rd_grid.cpp"},"deprecated":false,"digest":{"function_hash":"44463656971107459890647877684830367356","length":1031}},{"signature_version":"v1","source":"https://github.com/equinor/resdata/commit/d3f45828e9413506b8e8160a9304f4b7b06dcefc","target":{"file":"lib/resdata/rd_kw_grdecl.cpp","function":"fscanf_alloc_grdecl_data"},"deprecated":false,"digest":{"function_hash":"320515986073267446530889750401404045521","length":2350},"id":"CVE-2026-55209-2894bf06","signature_type":"Function"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/equinor/resdata/commit/b1fb1c1c8d3814c09fa6c5e6ee75fd90a10d1916","target":{"file":"lib/resdata/rd_kw.cpp"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["1302953448515731623065048941276925129","113094438529435653959583754187870846836","306680563813015861484580559209416649034","112134221143843269076264578874731326024"]},"id":"CVE-2026-55209-4017f3a0"},{"source":"https://github.com/equinor/resdata/commit/ee8cc12b026d945df3077bc98e211ee45f80a433","target":{"file":"lib/resdata/rd_grid.cpp"},"deprecated":false,"digest":{"line_hashes":["148410952477711347889720187787061386405","191063768397997656265810986045747310313","87782317591564279920377485027672312499","137310024534440539671502586106866899972","102268112366702821010196371919381454433","271930171125929758067135908459343605503","188670184932162803827168164386202846789","53568715648601841525636757761316133059","224997360978164486522695032728469515471","326468424129582386252392321770433012528","287094503186637290712603510715609626934"],"threshold":0.9},"id":"CVE-2026-55209-68e2ed0d","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"56403238923083781883058229073658266568","length":2130},"id":"CVE-2026-55209-79082c78","signature_type":"Function","signature_version":"v1","source":"https://github.com/equinor/resdata/commit/ee8cc12b026d945df3077bc98e211ee45f80a433","target":{"file":"lib/resdata/rd_grid.cpp","function":"rd_grid_alloc_GRDECL_kw__"}},{"signature_version":"v1","source":"https://github.com/equinor/resdata/commit/d3f45828e9413506b8e8160a9304f4b7b06dcefc","target":{"file":"lib/resdata/rd_kw_grdecl.cpp"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["224667615457105148961032486901701059633","67309586050317814127367961164466440108","319999147382232781659654200704163101971","140468619285485832140561903837650092511","168802386399839550181556229610894666809","97478012137848433413436383931315492294","220104436806230745257948946408553671633","138135730291636125666379149671590379285","159284275407339495210956294363234478132","136570217633742717802765764232064747256","165289517715922713581454294586333796843","57168841061644307927967776888620979701","3970089840466916038908009740873229456","93335020134550889673733121546297162962"]},"id":"CVE-2026-55209-b8501503","signature_type":"Line"},{"digest":{"function_hash":"198159560008473410486171978278097209468","length":462},"id":"CVE-2026-55209-bebc5fca","signature_type":"Function","signature_version":"v1","source":"https://github.com/equinor/resdata/commit/9f8fd6db472e0696080b768389914d60a453904f","target":{"function":"rd_grid_alloc_GRDECL_kw","file":"lib/resdata/rd_grid.cpp"},"deprecated":false},{"id":"CVE-2026-55209-e0da4014","signature_type":"Line","signature_version":"v1","source":"https://github.com/equinor/resdata/commit/9f8fd6db472e0696080b768389914d60a453904f","target":{"file":"lib/resdata/rd_grid.cpp"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["137310024534440539671502586106866899972","249765432861355975672812393704913868181","154818861054220690441687740058645191311","165638826157549274079309049629971637612","117441948385414159135103037141088911500","24621692049075485585325763949787950336","195553422469094306975268808339540301481","280554116258260083547722872556794511797","313021607255383353717524281504304683806","126208643837749686194691116089861768479","338426342712351971476533510670973503621","9171519237218712995939853729388518185"]}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/equinor/resdata/commit/b1fb1c1c8d3814c09fa6c5e6ee75fd90a10d1916","target":{"function":"ctype","file":"lib/resdata/rd_kw.cpp"},"deprecated":false,"digest":{"function_hash":"207856288311685616861971701064272269386","length":92},"id":"CVE-2026-55209-ea5443f7"}],"vanir_signatures_modified":"2026-10-28T11:14:55Z","source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-55209.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}