SUSE CVE-2025-2309

A vulnerability has been found in HDF5 1.14.6 and classified as critical. This vulnerability affects the function H5Tbitcopy of the component Type Conversion Logic. The manipulation leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been disclos...

OESA-2024-2339 hdf5 security update

HDF5 is a data model, library, and file format for storing and managing data. It supports an unlimited variety of datatypes, and is designed for flexible and efficient I/O and for high volume and complex data. HDF5 is portable and is extensible, allowing applications to evolve in their use of HDF...

The vulnerability of the H5T__ref_mem_setnull() function in the H5Tref.c file of the HDF5 library allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the H5Trefmemsetnull function in the H5Tref.c file of the HDF5 library is related to buffer overflow in the queue. Exploitation of this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...

TF2 Item Format 安全漏洞

TF2 Item Format is a library for GlenCoco individual developers. It helps users to set the format of TF2 items as a community standard. A security vulnerability existed in TF2 Item Format prior to version 5.9.14, which stemmed from the vulnerability of the tf2-item-format function to regular...

UBUNTU-CVE-2024-33877

HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5Tconvstructopt in H5Tconv.c...

DEBIAN-CVE-2024-32623

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5VMarrayfill in H5VM.c called from H5Sselectelements in H5Spoint.c...

DEBIAN-CVE-2024-29158

HDF5 through 1.14.3 contains a stack buffer overflow in H5FLarrmalloc, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution...

SUSE CVE-2024-32608

HDF5 library through 1.14.3 has memory corruption in H5Aclose resulting in the corruption of the instruction pointer and causing denial of service or potential code execution...

PT-2024-6189 · Unknown +2 · Hdf5 Library +2

Name of the Vulnerable Software and Affected Versions: HDF5 Library versions prior to 1.14.4 Description: The issue is related to a heap buffer overflow in the H5S point deserialize function located in the H5Spoint.c file of the HDF5 Library. This overflow can be exploited by a remote attacker to...

PT-2024-6196 · Unknown +2 · Hdf5 Library +2

Name of the Vulnerable Software and Affected Versions: HDF5 Library versions 1.14.3 and earlier Description: The issue is related to a heap-based buffer overflow in the H5HG read function in H5HG.c, which is called from H5VL native blob get in H5VLnative blob.c. This results in the corruption of...

USN-6518-1: AFFLIB vulnerability

Luis Rocha discovered that AFFLIB incorrectly handled certain input files. If a user or automated system were tricked into processing a specially crafted AFF image file, a remote attacker could possibly use this issue to cause a denial of service via application crash. CVE-2018-8050...

GIFLIB 安全漏洞

GIFLIB is a library for reading and editing gif images. A security vulnerability exists in GIFLIB, which stems from a Segmentation Fault issue in getarg.c. The vulnerability is caused by the presence of a Segmentation Fault...

GHSA-V5FW-Q4PF-8P2H Duplicate Advisory: Open Babel has out-of-bounds write in Gaussian translationVectors[]

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-jg3h-pv7c-4f9c. This link is maintained to preserve external references. Original Description Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple...

SUSE CVE-2009-0584

icc.c in the International Color Consortium ICC Format library aka icclib, as used in Ghostscript 8.64 and earlier and Argyll Color Management System CMS 1.0.3 and earlier, allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code by usin...

UBUNTU-CVE-2023-0801

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tifunix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6778, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee12...

UBUNTU-CVE-2021-37501

Buffer Overflow vulnerability in HDFGroup hdf5-h5dump 1.12.0 through 1.13.0 allows attackers to cause a denial of service via h5toolsstrsprint in /hdf5/tools/lib/h5toolsstr.c...

Libarchive Code Execution Vulnerability

libarchive is a multi-format archive and compression library. libarchive A code execution vulnerability exists in libarchive version 3.6.1, which stems from a failure to check for errors after calling the calloc function, i.e., if the function fails, the calloc function returns a NULL pointer,...

DEBIAN-CVE-2018-17432

A NULL pointer dereference in H5Osdspaceencode in H5Osdspace.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service via a crafted HDF5 file...

DEBIAN-CVE-2018-14034

An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in the function H5Oplinereset in H5Opline.c...

PoDoFo Denial of Service Vulnerability (CNVD-2018-15746)

PoDoFo is an open source , written in C++ using the PDF file format library . A denial of service vulnerability exists in the 'PoDoFo::PdfVariant::DelayedLoad' function of the PdfVariant.h file in PoDoFo version 0.9.6-rc1. A remote attacker can exploit this vulnerability to cause a denial of...