0.002 Low
EPSS
Percentile
57.8%
hdf5 is vulnerable to arbtirary code execution. A heap-based buffer over-read in the function H5O_sdspace_decode in H5Osdspace.c allows an attacker to execute arbitrary code on the host OS.
H5O_sdspace_decode
H5Osdspace.c
github.com/TeamSeri0us/pocs/blob/master/hdf5/README3.md
secdb.alpinelinux.org/v3.14/community.yaml