CVE-2026-55209

resdata is software for reading and writing result files from the Eclipse reservoir simulator. Prior to 6.2.9, resdata insufficiently validates numeric fields, grid dimensions, keyword sizes, and array indexes while parsing untrusted GRDECL files in lib/resdata/rd_kw_grdecl.cpp and lib/resdata/rd_grid.cpp. Malformed COORD, ZCORN, CORSNUM, ACTNUM, or MAPAXES data can reach rd_grid_alloc_GRDECL_kw__ with inconsistent lengths, while unbounded floating-point conversion can exceed the intended parser buffer. In a network service that accepts untrusted GRDECL files, these conditions can cause a classic buffer overflow, out-of-bounds reads, invalid array access, NULL pointer dereference, memory corruption, or service termination. This issue is fixed in version 6.2.9.

• CWE-120
• CWE-125
• CWE-129
• CWE-476

• https://github.com/equinor/resdata/commit/9f8fd6db472e0696080b768389914d60a453904f
• https://github.com/equinor/resdata/commit/d3f45828e9413506b8e8160a9304f4b7b06dcefc
• https://github.com/equinor/resdata/commit/ee8cc12b026d945df3077bc98e211ee45f80a433
• https://github.com/equinor/resdata/pull/1166
• https://github.com/equinor/resdata/releases/tag/6.2.9
• https://github.com/equinor/resdata/security/advisories/GHSA-pr85-w493-9w3x

Published

Sep 14, 2026

Last Modified

Sep 14, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-55203HAProxy through 3.4.0, fixed in commit 5985276, contains an …9.1
• CVE-2026-55204HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a …8.7
• CVE-2026-55205Hermes WebUI before 0.51.468 contains a resource exhaustion …5.3
• CVE-2026-55206py7zr is a Python-based library and utility to support 7zip …8.7
• CVE-2026-55207Pimcore is an Open Source Data & Experience Management Platf…8.8
• CVE-2026-55208Pimcore Studio Backend Bundle is the backend bundle for Pimc…7.7
• CVE-2026-55211Surfio is a library for reading and writing surface files. P…9.8
• CVE-2026-55212Pimcore is an Open Source Data & Experience Management Platf…7.1
• CVE-2026-55213h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and …7.5
• CVE-2026-55215MariaDB Connector/Node.js is used to connect applications de…7.5
• CVE-2026-55219Paymenter is a free and open-source webshop solution for man…5.3
• CVE-2026-5522IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 005 contains…6.7