CVE-2024-32620

CVE-2024-32620 is reported for the HDF5 Library up to version 1.14.3, where a heap-based buffer over-read in H5F_addr_decode_len (H5Fint.c) can corrupt the instruction pointer. Connected sources confirm this weakness exists in HDF5 prior to version 1.14.4 and cite a vendor advisory about fixes im...

CVE-2024-32620

HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5Faddrdecodelen in H5Fint.c, resulting in the corruption of the instruction pointer...

CVE-2024-32617

HDF5 Library through 1.14.3 contains a heap-based buffer over-read caused by the unsafe use of strdup in H5MMxstrdup in H5MM.c called from H5Genttolink in H5Glink.c...

CVE-2024-32617

HDF5 Library through 1.14.3 contains a heap-based buffer over-read caused by the unsafe use of strdup in H5MMxstrdup in H5MM.c called from H5Genttolink in H5Glink.c...

CVE-2024-32617

HDF5 Library through 1.14.3 contains a heap-based buffer over-read caused by the unsafe use of strdup in H5MMxstrdup in H5MM.c called from H5Genttolink in H5Glink.c...

CVE-2024-32617

HDF5 Library through 1.14.3 contains a heap-based buffer over-read caused by the unsafe use of strdup in H5MMxstrdup in H5MM.c called from H5Genttolink in H5Glink.c...

CVE-2024-32617

The CVE-2024-32617 entry is supported by connected documentation: HDF5 Library through 1.14.3 contains a heap-based buffer over-read caused by unsafe use of strdup in H5MM_xstrdup (H5MM.c), called from H5G__ent_to_link (H5Glink.c). This affects HDF5 1.14.3 and can lead to memory corruption. The r...

CVE-2024-32616

HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5Odtypeencodehelper in H5Odtype.c...

CVE-2024-32616

HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5Odtypeencodehelper in H5Odtype.c...

CVE-2024-32616

HDF5 Library prior to 1.14.4 is affected by a heap-based buffer over-read in H5O__dtype_encode_helper (H5Odtype.c) for CVE-2024-32616. Affected product: HDF5 Library (version 1.14.3 and earlier). Root cause: heap-based over-read in dtype encoding helper. Impact in the public description is limite...

CVE-2024-32616

HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5Odtypeencodehelper in H5Odtype.c...

CVE-2024-32616

HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5Odtypeencodehelper in H5Odtype.c...

CVE-2024-32613

HDF5 Library through 1.14.3 contains a heap-based buffer over-read in the function H5HLfldeserialize in H5HLcache.c, a different vulnerability than CVE-2024-32612...

CVE-2024-32613

HDF5 Library through 1.14.3 contains a heap-based buffer over-read in the function H5HLfldeserialize in H5HLcache.c, a different vulnerability than CVE-2024-32612...

CVE-2024-32613

Affected: HDF5 Library up to 1.14.3. Vulnerability: heap-based buffer over-read in H5HL__fl_deserialize (H5HLcache.c) leading to potential instruction-pointer corruption. Root cause: improper handling in H5HL__fl_deserialize. Impact: data corruption or DoS as described; exploitation status not de...

CVE-2024-32613

HDF5 Library through 1.14.3 contains a heap-based buffer over-read in the function H5HLfldeserialize in H5HLcache.c, a different vulnerability than CVE-2024-32612...

CVE-2024-32612

HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5HLfldeserialize in H5HLcache.c, resulting in the corruption of the instruction pointer, a different vulnerability than CVE-2024-32613...

CVE-2024-32612

HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5HLfldeserialize in H5HLcache.c, resulting in the corruption of the instruction pointer, a different vulnerability than CVE-2024-32613...

CVE-2024-32612

CVE-2024-32612 (and related CVE-2024-32613) affect HDF5 Library

CVE-2024-32612

HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5HLfldeserialize in H5HLcache.c, resulting in the corruption of the instruction pointer, a different vulnerability than CVE-2024-32613...