CVE-2024-33877

HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5Tconvstructopt in H5Tconv.c...

CVE-2024-32617

HDF5 Library through 1.14.3 contains a heap-based buffer over-read caused by the unsafe use of strdup in H5MMxstrdup in H5MM.c called from H5Genttolink in H5Glink.c...

CVE-2024-32616

HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5Odtypeencodehelper in H5Odtype.c...

CVE-2024-32615

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5Znbitdecompressonebyte in H5Znbit.c, caused by the earlier use of an initialized pointer...

CVE-2024-32613

HDF5 Library through 1.14.3 contains a heap-based buffer over-read in the function H5HLfldeserialize in H5HLcache.c, a different vulnerability than CVE-2024-32612...

CVE-2024-32612

HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5HLfldeserialize in H5HLcache.c, resulting in the corruption of the instruction pointer, a different vulnerability than CVE-2024-32613...

CVE-2024-33877

CVE-2024-33877 affects HDF5 Library up to version 1.14.3, with a heap-based buffer overflow in H5T__conv_struct_opt (H5Tconv.c). This is cited in connected advisories as a vulnerability in HDF5 1.14.x, with public documentation of the same root cause. The Tencent/Tenable listings confirm the issu...

CVE-2024-33877

HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5Tconvstructopt in H5Tconv.c...

CVE-2024-33877

HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5Tconvstructopt in H5Tconv.c...

CVE-2024-33875

HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5Olayoutencode in H5Olayout.c, resulting in the corruption of the instruction pointer...

CVE-2024-33873

CVE-2024-33873 affects the HDF5 Library up to version 1.14.3 and involves a heap-based buffer overflow in H5D__scatter_mem (H5Dscatgath.c). The vulnerability is reported across multiple security feeds (e.g., Azure Linux 3.0 Nessus, vendor advisories) and is mitigated by upgrading to HDF5 1.14.4 o...

CVE-2024-33873

HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5Dscattermem in H5Dscatgath.c...

CVE-2024-32624

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5Trefmemsetnull in H5Tref.c called from H5Tconvref in H5Tconv.c, resulting in the corruption of the instruction pointer...

CVE-2024-32623

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5VMarrayfill in H5VM.c called from H5Sselectelements in H5Spoint.c...

CVE-2024-32621

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5HGread in H5HG.c called from H5VLnativeblobget in H5VLnativeblob.c, resulting in the corruption of the instruction pointer...

CVE-2024-32621

HDF5 Library up to 1.14.3 suffers a heap-based buffer overflow in H5HG_read (H5HG.c), invoked via H5VL__native_blob_get, which leads to instruction-pointer corruption. This affects HDF5 1.14.x and can enable denial of service or potential code execution. The issue is fixed in 1.14.4 per vendor ad...

CVE-2024-32621

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5HGread in H5HG.c called from H5VLnativeblobget in H5VLnativeblob.c, resulting in the corruption of the instruction pointer...

CVE-2024-32620

HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5Faddrdecodelen in H5Fint.c, resulting in the corruption of the instruction pointer...

CVE-2024-32618

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5Tgetnativetype in H5Tnative.c, resulting in the corruption of the instruction pointer...

CVE-2024-32618

CVE-2024-32618 affects HDF5 Library up to v1.14.3, where a heap-based overflow in H5T__get_native_type (H5Tnative.c) can corrupt the instruction pointer. Impact is denial of service and potential code execution. The issue is fixed in HDF5 1.14.4; users should upgrade to 1.14.4 or later. The CVE e...