Lucene search
K

145 matches found

CNVD
CNVD
added 2025/04/02 12:0 a.m.3 views

HDF5 H5HL__fl_deserialize function heap buffer overflow vulnerability

HDF5 is a library of HDF open source . HDF5 suffers from a heap buffer overflow vulnerability. The vulnerability stems from the mishandling of the freeblock parameter by the H5HLfldeserialize function in the src/H5HLcache.c file. No detailed vulnerability details are provided at this time...

5.5CVSS7.4AI score0.00269EPSS
Exploits1References1
OSV
OSV
added 2025/03/28 8:15 p.m.3 views

UBUNTU-CVE-2025-2925

A vulnerability has been found in HDF5 up to 1.14.6 and classified as problematic. This vulnerability affects the function H5MMrealloc of the file src/H5MM.c. The manipulation of the argument mem leads to double free. The attack needs to be approached locally. The exploit has been disclosed to th...

5.5CVSS4.7AI score0.00242EPSS
Exploits1References6
OSV
OSV
added 2025/03/28 5:15 p.m.3 views

DEBIAN-CVE-2025-2913

A vulnerability was found in HDF5 up to 1.14.6. It has been rated as critical. Affected by this issue is the function H5FLblkgclist of the file src/H5FL.c. The manipulation of the argument H5FLblkheadt leads to use after free. An attack has to be approached locally. The exploit has been disclosed...

5.3CVSS4.3AI score0.00229EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/03/28 12:0 a.m.4 views

PT-2025-13568

Name of the Vulnerable Software and Affected Versions HDF5 versions up to 1.14.6 Description A problematic issue has been identified, affecting the H5MM realloc function in the file src/H5MM.c. The manipulation of the mem argument leads to a double free condition. This issue can be exploited...

5.5CVSS6.1AI score0.00242EPSS
Exploits1References21
CNNVD
CNNVD
added 2025/03/28 12:0 a.m.6 views

HDF5 安全漏洞

HDF5 is an HDF open source library. A security vulnerability exists in HDF5 1.14.6 and earlier versions, which stems from a null pointer dereference in the H5Ocachechkserialize function that requires local access...

5.5CVSS3.9AI score0.00233EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/03/28 12:0 a.m.6 views

HDF5 安全漏洞

HDF5 is a library of HDF open source . HDF5 has a buffer overflow vulnerability , the vulnerability stems from the H5Faccumfree function fails to correctly validate the length of the input data size , an attacker can use this vulnerability to cause a denial of service...

5.5CVSS7.2AI score0.00269EPSS
Exploits1References5
OSV
OSV
added 2025/03/14 9:15 p.m.2 views

DEBIAN-CVE-2025-2309

A vulnerability has been found in HDF5 1.14.6 and classified as critical. This vulnerability affects the function H5Tbitcopy of the component Type Conversion Logic. The manipulation leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been disclos...

7.8CVSS5.3AI score0.00324EPSS
Exploits1References1
OSV
OSV
added 2025/03/14 9:15 p.m.8 views

AZL-58806 CVE-2025-2310 affecting package hdf5 for versions less than 1.14.6-1

A vulnerability was found in HDF5 1.14.6 and classified as critical. This issue affects the function H5MMstrndup of the component Metadata Attribute Decoder. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and...

7.8CVSS5.9AI score0.00361EPSS
Exploits1References1
OSV
OSV
added 2025/03/14 9:15 p.m.2 views

UBUNTU-CVE-2025-2308

A vulnerability, which was classified as critical, was found in HDF5 1.14.6. This affects the function H5Zscaleoffsetdecompressonebyte of the component Scale-Offset Filter. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed...

7.8CVSS5.4AI score0.00364EPSS
Exploits1References7
CNNVD
CNNVD
added 2025/03/14 12:0 a.m.3 views

HDF5 安全漏洞

HDF5 is a library of HDF open source . HDF5 has a buffer overflow vulnerability , the vulnerability stems from the H5Tbitcopy function fails to correctly validate the length of the input data size , an attacker can use this vulnerability to cause a denial of service...

7.8CVSS7.2AI score0.00324EPSS
Exploits1References6
OSV
OSV
added 2025/03/10 2:15 p.m.7 views

AZL-58366 CVE-2025-2153 affecting package hdf5 for versions less than 1.14.6-1

A vulnerability, which was classified as critical, was found in HDF5 1.14.6. Affected is the function H5SMdelete of the file H5SM.c of the component h5 File Handler. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The complexity of an attack is...

8.1CVSS5.5AI score0.00462EPSS
Exploits1References1
OSV
OSV
added 2025/03/10 2:15 p.m.5 views

AZL-58368 CVE-2025-2153 affecting package hdf5 for versions less than 1.14.6-1

A vulnerability, which was classified as critical, was found in HDF5 1.14.6. Affected is the function H5SMdelete of the file H5SM.c of the component h5 File Handler. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The complexity of an attack is...

8.1CVSS5.5AI score0.00462EPSS
Exploits1References1
OSV
OSV
added 2025/03/10 2:15 p.m.4 views

DEBIAN-CVE-2025-2153

A vulnerability, which was classified as critical, was found in HDF5 1.14.6. Affected is the function H5SMdelete of the file H5SM.c of the component h5 File Handler. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The complexity of an attack is...

8.1CVSS4.7AI score0.00462EPSS
Exploits1References1
AstraLinux
AstraLinux
added 2025/02/11 7:35 a.m.2 views

Astra Linux – Vulnerability in hdf5

The HDF5 Library from version 1.14.3 contains a heap-based buffer overflow issue in the H5Fint.c file’s H5Faddrdecodelen function, which leads to corruption of the instruction pointer...

7.4CVSS7.3AI score0.00245EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2024/09/17 12:0 a.m.7 views

The vulnerability of the H5FL_arr_malloc() function in the HDF5 library allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the H5FLarrmalloc function in the HDF5 library is related to buffer overflow in the heap. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

7.4CVSS7.7AI score0.00225EPSS
Exploits0References5Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/09/17 12:0 a.m.6 views

Vulnerability of the H5F_addr_decode_len() function in the H5Fint.c file of the HDF5 library, which allows a hacker to cause a service failure.

The vulnerability of the H5Faddrdecodelen function in the H5Fint.c file of the HDF5 library is related to memory-walk attacks. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.8AI score0.00701EPSS
Exploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/09/17 12:0 a.m.7 views

The vulnerability of the HDF5 library, related to improper disabling or releasing resources, allows a perpetrator to cause a service failure.

The vulnerability of the HDF5 library is related to the improper shutdown or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.00672EPSS
Exploits1References5Affected Software3
OSV
OSV
added 2024/05/14 3:38 p.m.6 views

AZL-40573 CVE-2024-33876 affecting package hdf5 for versions less than 1.14.4.3-1

HDF5 Library through 1.14.3 has a heap buffer overflow in H5Spointdeserialize in H5Spoint.c...

5.7CVSS7.5AI score0.00227EPSS
Exploits0References1
OSV
OSV
added 2024/05/14 3:38 p.m.0 views

DEBIAN-CVE-2024-33877

HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5Tconvstructopt in H5Tconv.c...

8.8CVSS8.6AI score0.0092EPSS
Exploits0References1
OSV
OSV
added 2024/05/14 3:38 p.m.7 views

AZL-40531 CVE-2024-33873 affecting package hdf5 for versions less than 1.14.4.3-1

HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5Dscattermem in H5Dscatgath.c...

8.8CVSS7.2AI score0.0092EPSS
Exploits0References1
Rows per page
Query Builder