CVE-2024-33874

CVE-2024-33874 affects HDF5 Library up to version 1.14.3, where a heap buffer overflow occurs in H5O__mtime_new_encode (H5Omtime.c). Public advisories (Tencent/TSSA-2024:0175) enumerate this CVE among a set of HDF5 issues; a mitigation is to upgrade to HDF5 1.14.4 or later as indicated by the ven...

CVE-2024-33874

HDF5 Library through 1.14.3 has a heap buffer overflow in H5Omtimenewencode in H5Omtime.c...

CVE-2024-33874

HDF5 Library through 1.14.3 has a heap buffer overflow in H5Omtimenewencode in H5Omtime.c...

CVE-2024-33873

HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5Dscattermem in H5Dscatgath.c...

CVE-2024-33873

CVE-2024-33873 affects the HDF5 Library up to version 1.14.3 and involves a heap-based buffer overflow in H5D__scatter_mem (H5Dscatgath.c). The vulnerability is reported across multiple security feeds (e.g., Azure Linux 3.0 Nessus, vendor advisories) and is mitigated by upgrading to HDF5 1.14.4 o...

CVE-2024-33873

HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5Dscattermem in H5Dscatgath.c...

CVE-2024-33873

HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5Dscattermem in H5Dscatgath.c...

CVE-2024-32624

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5Trefmemsetnull in H5Tref.c called from H5Tconvref in H5Tconv.c, resulting in the corruption of the instruction pointer...

CVE-2024-32624

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5Trefmemsetnull in H5Tref.c called from H5Tconvref in H5Tconv.c, resulting in the corruption of the instruction pointer...

CVE-2024-32624

The CVE-2024-32624 entry refers to a heap-based buffer overflow in HDF5 Library up to version 1.14.3, specifically in H5T__ref_mem_setnull (H5Tref.c) invoked by H5T__conv_ref (H5Tconv.c), which can corrupt the instruction pointer. The connected materials confirm this vulnerability is associated w...

CVE-2024-32624

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5Trefmemsetnull in H5Tref.c called from H5Tconvref in H5Tconv.c, resulting in the corruption of the instruction pointer...

CVE-2024-32623

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5VMarrayfill in H5VM.c called from H5Sselectelements in H5Spoint.c...

CVE-2024-32623

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5VMarrayfill in H5VM.c called from H5Sselectelements in H5Spoint.c...

CVE-2024-32623

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5VMarrayfill in H5VM.c called from H5Sselectelements in H5Spoint.c...

CVE-2024-32623

CVE-2024-32623 affects HDF5 Library 1.14.3 and earlier, with a heap-based buffer overflow in H5VM_array_fill (called from H5S_select_elements). The documented root cause is a heap overflow in H5VM.c, enabling potential exploitation via the affected API surface. CVSS indicates a HIGH severity (8.8...

CVE-2024-32622

HDF5 Library through 1.14.3 contains a out-of-bounds read operation in H5FLarrmalloc in H5FL.c called from H5Ssetextentsimple in H5S.c...

CVE-2024-32622

HDF5 Library through 1.14.3 contains a out-of-bounds read operation in H5FLarrmalloc in H5FL.c called from H5Ssetextentsimple in H5S.c...

CVE-2024-32622

HDF5 Library through 1.14.3 contains a out-of-bounds read operation in H5FLarrmalloc in H5FL.c called from H5Ssetextentsimple in H5S.c...

CVE-2024-32622

HDF5 Library through 1.14.3 contains a out-of-bounds read operation in H5FLarrmalloc in H5FL.c called from H5Ssetextentsimple in H5S.c...

CVE-2024-32621

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5HGread in H5HG.c called from H5VLnativeblobget in H5VLnativeblob.c, resulting in the corruption of the instruction pointer...