PT-2026-39341

HDF5 through 1.14.3 contains a heap buffer overflow in H5HG cache heap deserialize, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution...

HDF5 Cache Heap Deserialization

The vulnerability of the H5HGcacheheapdeserialize function in the HDF5 library is related to buffer overflow in the heap. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

HDF Group HDF5 安全漏洞

HDF Group HDF5 is a suite of tools for managing and storing different types of data from the American company HDF Group. The product supports managing, manipulating, viewing and analyzing data and generating files in portable formats. A security vulnerability exists in HDF5 version 1.14.3 and pri...

opennavsurf-bag:bag_extended_fuzzer: Crash in H5HG__cache_heap_deserialize

Detailed Report: https://oss-fuzz.com/testcase?key=4787405367345152 Project: opennavsurf-bag Fuzzing Engine: libFuzzer Fuzz Target: bagextendedfuzzer Job Type: libfuzzerasanopennavsurf-bag Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x16db00011958 Crash State:...

PT-2021-28015

Name of the Vulnerable Software and Affected Versions HDF5 affected versions not specified Description A crash occurs due to an unknown read issue. The crash state involves the H5HG cache heap deserialize, H5C load entry, and H5C protect functions. Recommendations At the moment, there is no...