CVE-2024-32617

The CVE-2024-32617 entry is supported by connected documentation: HDF5 Library through 1.14.3 contains a heap-based buffer over-read caused by unsafe use of strdup in H5MM_xstrdup (H5MM.c), called from H5G__ent_to_link (H5Glink.c). This affects HDF5 1.14.3 and can lead to memory corruption. The r...

CVE-2024-32616

HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5Odtypeencodehelper in H5Odtype.c...

CVE-2024-32616

HDF5 Library prior to 1.14.4 is affected by a heap-based buffer over-read in H5O__dtype_encode_helper (H5Odtype.c) for CVE-2024-32616. Affected product: HDF5 Library (version 1.14.3 and earlier). Root cause: heap-based over-read in dtype encoding helper. Impact in the public description is limite...

CVE-2024-32616

HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5Odtypeencodehelper in H5Odtype.c...

CVE-2024-32616

HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5Odtypeencodehelper in H5Odtype.c...

CVE-2024-32616

HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5Odtypeencodehelper in H5Odtype.c...

CVE-2024-32613

HDF5 Library through 1.14.3 contains a heap-based buffer over-read in the function H5HLfldeserialize in H5HLcache.c, a different vulnerability than CVE-2024-32612...

CVE-2024-32613

Affected: HDF5 Library up to 1.14.3. Vulnerability: heap-based buffer over-read in H5HL__fl_deserialize (H5HLcache.c) leading to potential instruction-pointer corruption. Root cause: improper handling in H5HL__fl_deserialize. Impact: data corruption or DoS as described; exploitation status not de...

CVE-2024-32613

HDF5 Library through 1.14.3 contains a heap-based buffer over-read in the function H5HLfldeserialize in H5HLcache.c, a different vulnerability than CVE-2024-32612...

CVE-2024-32612

HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5HLfldeserialize in H5HLcache.c, resulting in the corruption of the instruction pointer, a different vulnerability than CVE-2024-32613...

CVE-2024-32612

HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5HLfldeserialize in H5HLcache.c, resulting in the corruption of the instruction pointer, a different vulnerability than CVE-2024-32613...

CVE-2024-32612

CVE-2024-32612 (and related CVE-2024-32613) affect HDF5 Library

CVE-2024-32612

HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5HLfldeserialize in H5HLcache.c, resulting in the corruption of the instruction pointer, a different vulnerability than CVE-2024-32613...

CVE-2024-32605

HDF5 Library through 1.14.3 has a heap-based buffer over-read in H5VMmemcpyvv in H5VM.c called from H5Dcompactreadvv in H5Dcompact.c...

CVE-2024-32605

HDF5 Library through 1.14.3 has a heap-based buffer over-read in H5VMmemcpyvv in H5VM.c called from H5Dcompactreadvv in H5Dcompact.c...

CVE-2024-32605

HDF5 Library through 1.14.3 has a heap-based buffer over-read in H5VMmemcpyvv in H5VM.c called from H5Dcompactreadvv in H5Dcompact.c...

PT-2024-6212 · Unknown +2 · Hdf5 Library +2

Name of the Vulnerable Software and Affected Versions: HDF5 Library versions prior to 1.14.4 Description: The issue is related to a heap-based buffer over-read in the H5VM memcpyvv function in the H5VM.c file of the HDF5 library. This can be exploited by a remote attacker to impact the...

PT-2024-6200 · Unknown +2 · Hdf5 Library +2

Name of the Vulnerable Software and Affected Versions: HDF5 Library versions prior to 1.14.4 Description: The issue is related to a heap-based buffer over-read caused by the unsafe use of strdup in H5MM xstrdup in H5MM.c, which can be exploited by a remote attacker to impact the confidentiality,...

PT-2024-25913

Name of the Vulnerable Software and Affected Versions libxml2 versions prior to 2.11.8 libxml2 versions 2.12.x prior to 2.12.7 Description An issue was discovered in xmllint, which is part of libxml2. The problem arises when formatting error messages with xmllint --htmlout, resulting in a buffer...

Oracle Linux 9 : tigervnc (ELSA-2024-2616)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-2616 advisory. - Fix crash caused by fix for CVE-2024-31083 Resolves: RHEL-30985 - Fix CVE-2024-31080 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in...