CVE-2019-20016

CVE-2019-20016 affects libmysofa. Multiple connected sources confirm the issue arises from insufficient restriction of recursive function calls, demonstrated by stack consumption in readOHDRHeaderMessageDatatype (dataobject.c) and directblockRead (fractalhead.c). The vulnerability is addressed in...

CVE-2019-20063

CVE-2019-20063 affects libmysofa prior to version 0.8, caused by an uninitialized use of memory in hdf/dataobject.c, demonstrated by mysofa2json. Several advisories confirm the issue and list it among CVEs fixed by updating to libmysofa 0.9.1 (openSUSE SU-2021-444/OSV entries; openSUSE backports)...

CVE-2021-3756

CVE-2021-3756 affects the libmysofa library (as referenced across connected documents, including NVD and related advisories). The available details confirm a heap-based buffer overflow vulnerability in libmysofa. The connected sources do not specify affected versions, root cause specifics beyond ...

CVE-2019-10672

CVE-2019-10672 affects libmysofa prior to 0.7, where the function treeRead in hdf/btree.c does not properly validate multiplications and additions. This can lead to instability/crashes when processing certain inputs, as noted by multiple sources (e.g., USN-4033-1 for Ubuntu 18.04, Debian/OSV entr...