Arbitrary Code Execution

hdf5 is vulnerable to arbitrary code execution. A memcpy parameter overlap in the function H5Olinkdecode in H5Olink.c allows an attacker to execute arbitrary code on the host OS...

Information Disclosure

hdf5 is vulnerable to information disclosure. The vulnerability exists due to a heap-based buffer over-read in the function H5Olinkdecode in H5Olink.c...

PT-2021-7728 · Hdf5 +3 · Hdf5 +3

Name of the Vulnerable Software and Affected Versions: HDF5 versions 1.12.0 through 1.13.0 Description: The issue is related to a buffer overflow in the h5tools str sprint function, located in /hdf5/tools/lib/h5tools str.c, which can cause a denial of service. This can be exploited by a remote...

CVE-2021-36977

matio aka MAT File I/O Library 1.5.20 and 1.5.21 has a heap-based buffer overflow in H5MMmemcpy called from H5MMmalloc and H5Cloadentry, related to use of HDF5 1.12.0...

CVE-2021-36977

matio aka MAT File I/O Library 1.5.20 and 1.5.21 has a heap-based buffer overflow in H5MMmemcpy called from H5MMmalloc and H5Cloadentry, related to use of HDF5 1.12.0...

Heap overflow

matio aka MAT File I/O Library 1.5.20 and 1.5.21 has a heap-based buffer overflow in H5MMmemcpy called from H5MMmalloc and H5Cloadentry, related to use of HDF5 1.12.0...

CVE-2021-36977

matio aka MAT File I/O Library 1.5.20 and 1.5.21 has a heap-based buffer overflow in H5MMmemcpy called from H5MMmalloc and H5Cloadentry, related to use of HDF5 1.12.0...

CVE-2021-36977

matio aka MAT File I/O Library 1.5.20 and 1.5.21 has a heap-based buffer overflow in H5MMmemcpy called from H5MMmalloc and H5Cloadentry, related to use of HDF5 1.12.0...

CVE-2021-36977

CVE-2021-36977 affects matio (MAT File I/O Library) 1.5.20 and 1.5.21, with a heap-based buffer overflow in H5MM_memcpy called from H5MM_malloc and H5C_load_entry, related to using HDF5 1.12.0. Impact details are provided across multiple advisories. Remediation available: upgrade matio to a newer...

CVE-2021-36977

matio aka MAT File I/O Library 1.5.20 and 1.5.21 has a heap-based buffer overflow in H5MMmemcpy called from H5MMmalloc and H5Cloadentry, related to use of HDF5 1.12.0...

CVE-2021-36977

matio aka MAT File I/O Library 1.5.20 and 1.5.21 has a heap-based buffer overflow in H5MMmemcpy called from H5MMmalloc and H5Cloadentry, related to use of HDF5 1.12.0...

PT-2021-21415 · Hdf5 +1 · Hdf5 +1

Name of the Vulnerable Software and Affected Versions: matio aka MAT File I/O Library versions 1.5.20 through 1.5.21 Description: The issue is related to a heap-based buffer overflow in the H5MM memcpy function, which is called from H5MM malloc and H5C load entry. This overflow is associated with...

USN-4817-1: HDF5 vulnerabilities

It was discovered that HDF5 incorrectly handled certain hdf5 files. An attacker could possibly use this issue to cause a denial of service...

CVE-2020-10811

An issue was discovered in HDF5 through 1.12.0. A heap-based buffer over-read exists in the function H5Olayoutdecode located in H5Olayout.c. It allows an attacker to cause Denial of Service...

CVE-2020-10809

An issue was discovered in HDF5 through 1.12.0. A heap-based buffer overflow exists in the function Decompress located in decompress.c. It can be triggered by sending a crafted file to the gif2h5 binary. It allows an attacker to cause Denial of Service...

CVE-2020-10810

An issue was discovered in HDF5 through 1.12.0. A NULL pointer dereference exists in the function H5ACunpinentry located in H5AC.c. It allows an attacker to cause Denial of Service...

CVE-2020-10812

An issue was discovered in HDF5 through 1.12.0. A NULL pointer dereference exists in the function H5Fgetnrefs located in H5Fquery.c. It allows an attacker to cause Denial of Service...

CVE-2018-17237

A SIGFPE signal is raised in the function H5Dchunksetinforeal of H5Dchunk.c in the HDF HDF5 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. This issue is different from CVE-2018-11207...

HDF5 Null Pointer Dereference Vulnerability (CNVD-2020-21016)

HDF5 is a suite of tools for managing and storing different types of data. The product supports managing, manipulating, viewing and analyzing data and generating files in portable formats. A null pointer dereference vulnerability exists in the 'H5ACunpinentry' function of the H5AC.c file in HDF5...

HDF5 Buffer Overflow Vulnerability (CNVD-2020-21017)

HDF5 is a suite of tools for managing and storing different types of data. The product supports managing, manipulating, viewing and analyzing data and generating files in portable formats. A buffer overflow vulnerability exists in the 'H5Olayoutdecode' function of the H5Olayout.c file in HDF5...