Threats affecting pkg:github/CGNS

CVE-2026-110661 is a stack out-of-bounds read vulnerability in CGNS up to version 4.5.2. It occurs in the ADFI_read_node_header function when processing crafted ADF node headers, allowing attackers to cause application crashes by supplying malformed .cgns or .adf files with non-NUL-terminated end tags. This leads to the ADFI_stridx_c function scanning beyond allocated memory, crashing tools such as cgnslist.