What is GHSA-pr85-w493-9w3x?

GHSA-pr85-w493-9w3x is a security advisory published by GitHub Security Advisories with Critical severity. resdata has Classic Buffer Overflow, Improper Validation of Array Index, NULL Pointer Dereference and Out-of-bounds Read

Which CVE IDs does GHSA-pr85-w493-9w3x cover?

GHSA-pr85-w493-9w3x covers the following CVE IDs: CVE-2026-55209. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-pr85-w493-9w3x?

GHSA-pr85-w493-9w3x has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

Which products are affected by GHSA-pr85-w493-9w3x?

GHSA-pr85-w493-9w3x affects 1 product, including: pip/resdata:\u003c 6.2.9.

GHSA-pr85-w493-9w3xCriticalCVSS 9.8

resdata has Classic Buffer Overflow, Improper Validation of Array Index, NULL Pointer Dereference and Out-of-bounds Read

Vendor

GitHub Security Advisories

Published

August 18, 2026

Last Modified

August 18, 2026

🔗 CVE IDs covered (1)

CVE-2026-55209 →

📋 Description

Impact

Prior to version 6.2.9 resdata would not correctly validate input in GRDECL files. The severity rating assumes that resdata is used to parse untrused files in a networking context such as a webservice.

Patches

The bug has been patched starting with version 6.2.9.

🎯 Affected products1

pip/resdata:< 6.2.9

🔗 References (3)

https://github.com/equinor/resdata/security/advisories/GHSA-pr85-w493-9w3x
https://github.com/equinor/resdata/releases/tag/6.2.9
https://github.com/advisories/GHSA-pr85-w493-9w3x