CVE-2009-2850: Nasa Goddard Space Flight Center Common Data Format

High severity, CVSS 9.3. EPSS: 2.9% chance of exploitation in the next 30 days.

Multiple buffer overflows in NASA Common Data Format (CDF) allow context-dependent attackers to execute arbitrary code, as demonstrated using (1) an array index error in the ReadAEDRList64 function, and other errors in the (2) SearchForRecord_r_64, (3) LastRecord64, (4) CDFsel64, and other unspecified functions.

Affected products

• Nasa Goddard Space Flight Center Common Data Format: any version

Published 2009-08-18. Last modified 2026-06-16.