Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: hdf5 (UTSA-2026-054070)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054070 advisory. An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5Osdspacedecode in H5Osdspace.c. Tenable has extracte...

Arbitrary Code Execution

hdf5 is vulnerable to arbtirary code execution. A heap-based buffer over-read in the function H5Osdspacedecode in H5Osdspace.c allows an attacker to execute arbitrary code on the host OS...

CVE-2018-17432

A NULL pointer dereference in H5Osdspaceencode in H5Osdspace.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service via a crafted HDF5 file...

CVE-2018-14460

An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5Osdspacedecode in H5Osdspace.c...

Heap overflow

An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5Osdspacedecode in H5Osdspace.c...

CVE-2018-14460

An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5Osdspacedecode in H5Osdspace.c...

CVE-2018-14460

CVE-2018-14460 affects HDF5 1.8.20: a heap-based buffer over-read in H5O_sdspace_decode (H5Osdspace.c). The connected OSV entries confirm this CVE is addressed in SUSE/HPC advisories (e.g., SUSE-SU-2022:1933-1 and related OSV updates) as part of a security fix for HDF5, and multiple CVEs (includi...