CVE-2020-6860

libmysofa 0.9.1 has a stack-based buffer overflow in readDataVar in hdf/dataobject.c during the reading of a header message attribute...

libmysofa stack buffer overflow vulnerability (CNVD-2020-02452)

libmysofa is a library for reading AES SOFA files. A buffer overflow vulnerability exists in the 'readDataVar' function of the hdf/dataobject.c file in libmysofa version 0.9.1. The vulnerability stems from a networked system or product performing operations in memory without properly validating...