A critical buffer overflow vulnerability in Equinor resdata allows unauthenticated remote attackers to achieve arbitrary code execution or cause service termination.

The software fails to properly validate numeric fields and grid dimensions when processing GRDECL files, leading to memory corruption issues such as classic buffer overflows, out-of-bounds reads, and NULL pointer dereferences. This vulnerability is exploitable by an unauthenticated remote attacker through the submission of specially crafted input files.

The vulnerability carries a CVSS score of 9.8, reflecting its potential for total system compromise. Successful exploitation could lead to unauthorized remote code execution, enabling attackers to gain full control over the host system, access sensitive reservoir simulation data, or cause significant operational disruption by terminating critical services.

Immediate Action: Upgrade to Equinor resdata version 6.2.9 or later immediately to apply the necessary input validation checks.

Proactive Monitoring: Monitor system logs for unexpected service crashes or anomalous memory usage patterns associated with the resdata parsing engine.

Compensating Controls: Restrict access to any network services that accept or process GRDECL files to trusted sources only, and implement strict file validation schemas where possible.

Public Exploit Available: No

Given the critical severity of this vulnerability and the potential for unauthenticated remote code execution, organizations utilizing resdata must prioritize the update to version 6.2.9. Failure to remediate this flaw exposes infrastructure to significant risk of compromise, and immediate patching is the only effective method to eliminate the underlying memory safety issues.