CVE-2024-33877

HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5Tconvstructopt in H5Tconv.c...

CVE-2024-33877

HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5Tconvstructopt in H5Tconv.c...

CVE-2024-33875

HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5Olayoutencode in H5Olayout.c, resulting in the corruption of the instruction pointer...

CVE-2024-33873

CVE-2024-33873 affects the HDF5 Library up to version 1.14.3 and involves a heap-based buffer overflow in H5D__scatter_mem (H5Dscatgath.c). The vulnerability is reported across multiple security feeds (e.g., Azure Linux 3.0 Nessus, vendor advisories) and is mitigated by upgrading to HDF5 1.14.4 o...

CVE-2024-33873

HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5Dscattermem in H5Dscatgath.c...

CVE-2024-32624

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5Trefmemsetnull in H5Tref.c called from H5Tconvref in H5Tconv.c, resulting in the corruption of the instruction pointer...

CVE-2024-32623

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5VMarrayfill in H5VM.c called from H5Sselectelements in H5Spoint.c...

CVE-2024-32623

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5VMarrayfill in H5VM.c called from H5Sselectelements in H5Spoint.c...

CVE-2024-32623

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5VMarrayfill in H5VM.c called from H5Sselectelements in H5Spoint.c...

CVE-2024-32621

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5HGread in H5HG.c called from H5VLnativeblobget in H5VLnativeblob.c, resulting in the corruption of the instruction pointer...

CVE-2024-32621

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5HGread in H5HG.c called from H5VLnativeblobget in H5VLnativeblob.c, resulting in the corruption of the instruction pointer...

CVE-2024-32621

HDF5 Library up to 1.14.3 suffers a heap-based buffer overflow in H5HG_read (H5HG.c), invoked via H5VL__native_blob_get, which leads to instruction-pointer corruption. This affects HDF5 1.14.x and can enable denial of service or potential code execution. The issue is fixed in 1.14.4 per vendor ad...

CVE-2024-32621

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5HGread in H5HG.c called from H5VLnativeblobget in H5VLnativeblob.c, resulting in the corruption of the instruction pointer...

CVE-2024-32620

HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5Faddrdecodelen in H5Fint.c, resulting in the corruption of the instruction pointer...

CVE-2024-32620

CVE-2024-32620 is reported for the HDF5 Library up to version 1.14.3, where a heap-based buffer over-read in H5F_addr_decode_len (H5Fint.c) can corrupt the instruction pointer. Connected sources confirm this weakness exists in HDF5 prior to version 1.14.4 and cite a vendor advisory about fixes im...

CVE-2024-32619

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5Tcopyreopen in H5T.c, resulting in the corruption of the instruction pointer...

CVE-2024-32618

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5Tgetnativetype in H5Tnative.c, resulting in the corruption of the instruction pointer...

CVE-2024-32618

CVE-2024-32618 affects HDF5 Library up to v1.14.3, where a heap-based overflow in H5T__get_native_type (H5Tnative.c) can corrupt the instruction pointer. Impact is denial of service and potential code execution. The issue is fixed in HDF5 1.14.4; users should upgrade to 1.14.4 or later. The CVE e...

CVE-2024-32617

HDF5 Library through 1.14.3 contains a heap-based buffer over-read caused by the unsafe use of strdup in H5MMxstrdup in H5MM.c called from H5Genttolink in H5Glink.c...

CVE-2024-32617

HDF5 Library through 1.14.3 contains a heap-based buffer over-read caused by the unsafe use of strdup in H5MMxstrdup in H5MM.c called from H5Genttolink in H5Glink.c...