Integer Overflow Vulnerability in OpenS100 Bathymetric Surface Parser by OpenS100

CVE-2026-35001

What is CVE-2026-35001?

The OpenS100 Bathymetric Surface parser has an integer overflow vulnerability that can be exploited by attackers. By manipulating a specially crafted S-102 HDF5 file with malicious grid dimension metadata, attackers can trigger a heap-based buffer overflow. This is caused by the unvalidated multiplication of the numPointsLatitudinal and numPointsLongitudinal values in the S102_VG_BathymetryCoverage::Read() function, leading to a 32-bit integer wraparound. Consequently, this results in an undersized heap buffer allocation, which can cause application crashes or allow for arbitrary code execution.

References