CVE-2024-32622

CVE-2024-32622 affects HDF5 Library up to version 1.14.3 and involves an out-of-bounds read in H5FL_arr_malloc (invoked from H5S_set_extent_simple in H5S.c via H5FL.c). Public technical detail from Tencent/TSSA advisory confirms the vulnerability and notes that a fix was issued in HDF5 1.14.4. Im...

CVE-2020-18494

Buffer Overflow vulnerability in function H5Sclose in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file...