Buffer Overflow Vulnerability in Eclipse Reservoir Simulator Resdata Software

CVE-2026-55209

What is CVE-2026-55209?

The resdata software, utilized for managing result files from the Eclipse reservoir simulator, is susceptible to multiple vulnerabilities due to inadequate validation of numeric fields, grid dimensions, keyword sizes, and array indexes when processing untrusted GRDECL files. This flaw, present in versions prior to 6.2.9, can lead to various issues such as buffer overflows, out-of-bounds reads, invalid array accesses, NULL pointer dereferences, memory corruption, and unexpected service termination. The issue is resolved in version 6.2.9, reinforcing the importance of updating to protect against these potential threats.

References