PatchSiren

CGNS CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM CGNS CVE published 2026-10-14

CVE-2026-110661

A stack out-of-bounds read vulnerability exists in CGNS through version 4.5.2 in the ADFI_read_node_header function. This vulnerability allows attackers to crash applications by providing crafted ADF node headers. The issue arises from the ADFI_stridx_c function scanning past disk_node_data when encountering .cgns or .adf files with non-NUL-terminated end tags.