HDF5 Library through 1.14.3 contains a heap-based buffer over-read caused by the unsafe use of strdup in H5MM_xstrdup in H5MM.c (called from H5G__ent_to_link in H5Glink.c).
| Reporter | Title | Published | Views | Family All 35 |
|---|---|---|---|---|
 | The vulnerability of the H5MM_xstrdup() function in the H5MM.c file of the HDF5 library allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information. | 17 Sep 202400:00 | – | bdu_fstec |
 | CVE-2024-32617 affecting package hdf5 for versions less than 1.14.4-1 | 23 May 202423:29 | – | cbl_mariner |
 | HDF Group HDF5 安全漏洞 | 10 May 202400:00 | – | cnnvd |
 | CVE-2024-32617 | 9 May 202416:43 | – | cve |
 | CVE-2024-32617 | 9 May 202416:43 | – | cvelist |
 | CVE-2024-32617 | 9 May 202416:43 | – | debiancve |
 | EUVD-2024-30419 | 3 Oct 202520:07 | – | euvd |
 | CBL Mariner 2.0 Security Update: hdf5 (CVE-2024-32617) | 21 Aug 202400:00 | – | nessus |
| RHEL 9 : RHEL AI 1.5 hdf5 (RHSA-2025:3801) | 13 Apr 202500:00 | – | nessus |
| TencentOS Server 4: hdf5 (TSSA-2024:0175) | 16 Jun 202500:00 | – | nessus |
10
Node
OR
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
21 Feb 2026 09:18Current
7High risk
Vulners AI Score7
CVSS 3.18.8
EPSS0.00814
SSVC