HDF5 Library through 1.14.3 has a heap-based buffer over-read in H5VM_memcpyvv in H5VM.c (called from H5D__compact_readvv in H5Dcompact.c).

🗓️ 14 May 2024 07:00:00Reported by MicrosoftType

HDF5 version up to 1.14.3 has heap over-read in H5VM_memcpyvv called from H5D__compact_readvv.

Reporter	Title	Published	Views	Family All 38
AstraLinux	Astra Linux – Vulnerability in hdf5	10 Aug 202607:11	–	astralinux
Tenable Nessus	Azure Linux 3.0 Security Update: hdf5 (CVE-2024-32605)	10 Feb 202500:00	–	nessus
Tenable Nessus	CBL Mariner 2.0 Security Update: hdf5 (CVE-2024-32605)	3 Jul 202400:00	–	nessus
Tenable Nessus	RHEL 9 : RHEL AI 1.5 hdf5 (RHSA-2025:3801)	13 Apr 202500:00	–	nessus
Tenable Nessus	TencentOS Server 4: hdf5 (TSSA-2024:0175)	16 Jun 202500:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2024-32605	5 Mar 202500:00	–	nessus
BDU FSTEC	The vulnerability of the H5VM_memcpyvv() function in the H5VM.c file of the HDF5 library allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	17 Sep 202400:00	–	bdu_fstec
CBLMariner	CVE-2024-32605 affecting package hdf5 for versions less than 1.14.4.3-1	21 Jun 202409:32	–	cbl_mariner
CBLMariner	CVE-2024-32605 affecting package hdf5 for versions less than 1.14.4-1	23 May 202423:29	–	cbl_mariner
CNNVD	HDF Group HDF5 安全漏洞	10 May 202400:00	–	cnnvd