CVE-2026-33147

GMT is an open source collection of command-line tools for manipulating geographic and Cartesian data sets. In versions from 6.6.0 and prior, a stack-based buffer overflow vulnerability was identified in the gmt_remote_dataset_id function within src/gmt_remote.c. This issue occurs when a specially crafted long string is passed as a dataset identifier (e.g., via the which module), leading to a crash or potential arbitrary code execution. This issue has been patched via commit 0ad2b49.

• CWE-121

• https://github.com/GenericMappingTools/gmt/commit/0ad2b491470df82c9ec1139dcbd70502fa28a082Patch
• https://github.com/GenericMappingTools/gmt/security/advisories/GHSA-fqxx-62x7-9gwgExploit, Vendor Advisory
• https://github.com/GenericMappingTools/gmt/security/advisories/GHSA-fqxx-62x7-9gwgExploit, Vendor Advisory

Published

Mar 20, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-33141Chamilo LMS is a learning management system. Prior to 2.0.0-…6.5
• CVE-2026-33142OneUptime is a solution for monitoring and managing online s…8.1
• CVE-2026-33143OneUptime is a solution for monitoring and managing online s…7.5
• CVE-2026-33144GPAC is an open-source multimedia framework. Prior to commit…7.8
• CVE-2026-33145xrdp is an open source RDP server. Versions through 0.10.5 a…6.3
• CVE-2026-33146Docmost is open-source collaborative wiki and documentation …4.3
• CVE-2026-33148Tandoor Recipes is an application for managing recipes, plan…6.5
• CVE-2026-33149Tandoor Recipes is an application for managing recipes, plan…8.1
• CVE-2026-3315Incorrect Default Permissions, : Execution with Unnecessary …7.8
• CVE-2026-33150libfuse is the reference implementation of the Linux FUSE. F…7.8
• CVE-2026-33151Socket.IO is an open source, real-time, bidirectional, event…7.5
• CVE-2026-33152Tandoor Recipes is an application for managing recipes, plan…7.5