CVE-2026-15830
Description
A flaw was found in Django's GeoDjango component. A remote attacker could exploit this vulnerability by supplying specially crafted, deeply nested geometry collection objects in well-known text (WKT), well-known binary (WKB), or hex-encoded WKB formats. This triggers unbounded recursion and a segmentation fault in the underlying GEOS library, leading to a denial of service (DoS) for applications using spatial field lookups or the GeometryField form field.
Statement
This Moderate impact denial-of-service vulnerability in Django affects Red Hat products utilizing GeoDjango, such as Red Hat Ansible Automation Platform and Red Hat OpenStack Platform. Processing specially crafted, deeply nested geometry collections in well-known text (WKT), well-known binary (WKB), or hex-encoded WKB formats can lead to unbounded recursion and a segmentation fault in the underlying GEOS library, causing service disruption.
Mitigation
To mitigate this issue, configure Django applications utilizing GeoDjango to restrict the maximum depth of nested geometry collections. This can be achieved by setting the `max_geom_collections` argument on `GEOSGeometry` objects, spatial form fields, or model fields that handle WKT or WKB inputs. Implementing this configuration change may necessitate application-level adjustments and a restart of the Django application to ensure the new limits are enforced.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 5.3 | N/A | 5.3 |
| Attack Vector | Network | N/A | Network |
| Attack Complexity | Low | N/A | Low |
| Privileges Required | None | N/A | None |
| User Interaction | None | N/A | None |
| Scope | Unchanged | N/A | Unchanged |
| Confidentiality | None | N/A | None |
| Integrity Impact | None | N/A | None |
| Availability Impact | Low | N/A | Low |
Vector
Red Hat: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
cve.org: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Understanding the Weakness (CWE)
Availability
Technical Impact: DoS: Resource Consumption (CPU)
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
