15 matches found
CVE-2026-120755
HDF5 through 2.2.0 contains an out-of-bounds read vulnerability in H5Zfilterszip in src/H5Zszip.c. When decoding a szip-compressed chunk, the function subtracts the 4-byte uncompressed-length header from the chunk length without first verifying that the chunk is at least 4 bytes long. A truncated...
CVE-2026-120755
HDF5 versions through 2.2.0 are vulnerable to an out-of-bounds read in the H5Z__filter_szip() function within src/H5Zszip.c. The issue is caused by an integer underflow where the software subtracts a 4-byte uncompressed-length header from a chunk length without verifying the chunk is at least 4 b...
CVE-2026-120755 Integer Underflow Leads to Out-of-Bounds Read via Truncated Chunk in HDF5 Szip Filter
HDF5 through 2.2.0 contains an out-of-bounds read vulnerability in H5Zfilterszip in src/H5Zszip.c. When decoding a szip-compressed chunk, the function subtracts the 4-byte uncompressed-length header from the chunk length without first verifying that the chunk is at least 4 bytes long. A truncated...
EUVD-2026-115916
HDF5 through 2.2.0 contains an out-of-bounds read vulnerability in H5Zfilterszip in src/H5Zszip.c. When decoding a szip-compressed chunk, the function subtracts the 4-byte uncompressed-length header from the chunk length without first verifying that the chunk is at least 4 bytes long. A truncated...
CVE-2026-120755: The HDF Group Szip Filter: HDF5 through 2.2.0 contains an out-of-bounds read vulnerability in H5Z__filter_szip() in src/H5Zszip.c
HDF5 through 2.2.0 contains an out-of-bounds read vulnerability in H5Zfilterszip in src/H5Zszip.c. When decoding a szip-compressed chunk, the function subtracts the 4-byte uncompressed-length header from the chunk length without first verifying that the chunk is at least 4 bytes long. A truncated...
CVE-2026-120457
libaec through 1.1.7 contains an out-of-bounds read vulnerability in msedecode in src/decode.c that allows attackers to bypass a signed bounds check via an overlong fundamental sequence. Attackers can supply a crafted CCSDS 121.0/SZIP stream with 2^31 or more zero bits to crash the decoder or lea...
CVE-2026-120457 libaec through 1.1.7 Out-of-Bounds Read via m_se_decode() Second Extension Decoder
libaec through 1.1.7 contains an out-of-bounds read vulnerability in msedecode in src/decode.c that allows attackers to bypass a signed bounds check via an overlong fundamental sequence. Attackers can supply a crafted CCSDS 121.0/SZIP stream with 2^31 or more zero bits to crash the decoder or lea...
CVE-2026-120457
The libaec library, versions through 1.1.7 , contains an out-of-bounds read vulnerability in the m_se_decode() function located in src/decode.c. The root cause is a signed bounds check bypass triggered by an overlong fundamental sequence. An attacker can exploit this by supplying a crafted CCSDS ...
CVE-2026-120457 libaec through 1.1.7 Out-of-Bounds Read via m_se_decode() Second Extension Decoder
libaec through 1.1.7 contains an out-of-bounds read vulnerability in msedecode in src/decode.c that allows attackers to bypass a signed bounds check via an overlong fundamental sequence. Attackers can supply a crafted CCSDS 121.0/SZIP stream with 2^31 or more zero bits to crash the decoder or lea...
EUVD-2026-115217
libaec through 1.1.7 contains an out-of-bounds read vulnerability in msedecode in src/decode.c that allows attackers to bypass a signed bounds check via an overlong fundamental sequence. Attackers can supply a crafted CCSDS 121.0/SZIP stream with 2^31 or more zero bits to crash the decoder or lea...
CVE-2026-120457: Deutsches Klimarechenzentrum libaec: libaec through 1.1.7 contains an out-of-bounds read vulnerability in m_se_decode() in src/decode.c that allows…
libaec through 1.1.7 contains an out-of-bounds read vulnerability in msedecode in src/decode.c that allows attackers to bypass a signed bounds check via an overlong fundamental sequence. Attackers can supply a crafted CCSDS 121.0/SZIP stream with 2^31 or more zero bits to crash the decoder or lea...
Fedora: Security Advisory for rust-szip (FEDORA-2024-40ee18b2e7)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 39 Update: rust-szip-1.0.0-7.fc39
A fast command line tool for snappy compression and decompression...
Fedora: Security Advisory for rust-szip (FEDORA-2024-ce2936b568)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...