Hdf5
by Hdfgroup
Source repositories
CVEs (141)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-33877 | Hig | 0.57 | 8.8 | 0.01 | May 14, 2024 | HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5T__conv_struct_opt in H5Tconv.c. | ||
| CVE-2024-33873 | Hig | 0.57 | 8.8 | 0.01 | May 14, 2024 | HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5D__scatter_mem in H5Dscatgath.c. | ||
| CVE-2024-32623 | Hig | 0.57 | 8.8 | 0.01 | May 14, 2024 | HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5VM_array_fill in H5VM.c (called from H5S_select_elements in H5Spoint.c). | ||
| CVE-2024-32617 | Hig | 0.57 | 8.8 | 0.01 | May 14, 2024 | HDF5 Library through 1.14.3 contains a heap-based buffer over-read caused by the unsafe use of strdup in H5MM_xstrdup in H5MM.c (called from H5G__ent_to_link in H5Glink.c). | ||
| CVE-2024-32615 | Cri | 0.57 | 9.8 | 0.01 | May 14, 2024 | HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5Z__nbit_decompress_one_byte in H5Znbit.c, caused by the earlier use of an initialized pointer. | ||
| CVE-2024-32614 | Hig | 0.57 | 8.8 | 0.01 | May 14, 2024 | HDF5 Library through 1.14.3 has a SEGV in H5VM_memcpyvv in H5VM.c. | ||
| CVE-2024-32605 | Hig | 0.57 | 8.8 | 0.01 | May 14, 2024 | HDF5 Library through 1.14.3 has a heap-based buffer over-read in H5VM_memcpyvv in H5VM.c (called from H5D__compact_readvv in H5Dcompact.c). | ||
| CVE-2024-29161 | Hig | 0.57 | 8.8 | 0.01 | May 14, 2024 | HDF5 through 1.14.3 contains a heap buffer overflow in H5A__attr_release_table, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution. | ||
| CVE-2020-18494 | Hig | 0.57 | 8.8 | 0.01 | Aug 22, 2023 | Buffer Overflow vulnerability in function H5S_close in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file. | ||
| CVE-2020-18232 | Hig | 0.57 | 8.8 | 0.01 | Aug 22, 2023 | Buffer Overflow vulnerability in function H5S_close in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file. | ||
| CVE-2021-46242 | Hig | 0.57 | 8.8 | 0.01 | Jan 21, 2022 | HDF5 v1.13.1-1 was discovered to contain a heap-use-after free via the component H5AC_unpin_entry. | ||
| CVE-2019-9152 | Hig | 0.57 | 8.8 | 0.01 | Feb 25, 2019 | An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5MM_xstrdup in H5MM.c when called from H5O_dtype_decode_helper in H5Odtype.c. | ||
| CVE-2019-9151 | Hig | 0.57 | 8.8 | 0.02 | Feb 25, 2019 | An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5VM_memcpyvv in H5VM.c when called from H5D__compact_readvv in H5Dcompact.c. | ||
| CVE-2018-16438 | Hig | 0.57 | 8.8 | 0.02 | Sep 4, 2018 | An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in H5L_extern_query at H5Lexternal.c. | ||
| CVE-2018-14460 | Hig | 0.57 | 8.8 | 0.02 | Jul 20, 2018 | An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_sdspace_decode in H5Osdspace.c. | ||
| CVE-2018-14035 | Hig | 0.57 | 8.8 | 0.01 | Jul 13, 2018 | An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5VM_memcpyvv in H5VM.c. | ||
| CVE-2018-14034 | Hig | 0.57 | 8.8 | 0.01 | Jul 13, 2018 | An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in the function H5O_pline_reset in H5Opline.c. | ||
| CVE-2018-14033 | Hig | 0.57 | 8.8 | 0.02 | Jul 13, 2018 | An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_layout_decode in H5Olayout.c, related to HDmemcpy. | ||
| CVE-2018-14031 | Hig | 0.57 | 8.8 | 0.02 | Jul 13, 2018 | An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5T_copy in H5T.c. | ||
| CVE-2017-17509 | Hig | 0.57 | 8.8 | 0.02 | Dec 11, 2017 | In HDF5 1.10.1, there is an out of bounds write vulnerability in the function H5G__ent_decode_vec in H5Gcache.c in libhdf5.a. For example, h5dump would crash or possibly have unspecified other impact someone opens a crafted hdf5 file. |
- risk 0.57cvss 8.8epss 0.01
HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5T__conv_struct_opt in H5Tconv.c.
- risk 0.57cvss 8.8epss 0.01
HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5D__scatter_mem in H5Dscatgath.c.
- risk 0.57cvss 8.8epss 0.01
HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5VM_array_fill in H5VM.c (called from H5S_select_elements in H5Spoint.c).
- risk 0.57cvss 8.8epss 0.01
HDF5 Library through 1.14.3 contains a heap-based buffer over-read caused by the unsafe use of strdup in H5MM_xstrdup in H5MM.c (called from H5G__ent_to_link in H5Glink.c).
- risk 0.57cvss 9.8epss 0.01
HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5Z__nbit_decompress_one_byte in H5Znbit.c, caused by the earlier use of an initialized pointer.
- risk 0.57cvss 8.8epss 0.01
HDF5 Library through 1.14.3 has a SEGV in H5VM_memcpyvv in H5VM.c.
- risk 0.57cvss 8.8epss 0.01
HDF5 Library through 1.14.3 has a heap-based buffer over-read in H5VM_memcpyvv in H5VM.c (called from H5D__compact_readvv in H5Dcompact.c).
- risk 0.57cvss 8.8epss 0.01
HDF5 through 1.14.3 contains a heap buffer overflow in H5A__attr_release_table, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution.
- risk 0.57cvss 8.8epss 0.01
Buffer Overflow vulnerability in function H5S_close in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file.
- risk 0.57cvss 8.8epss 0.01
Buffer Overflow vulnerability in function H5S_close in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file.
- risk 0.57cvss 8.8epss 0.01
HDF5 v1.13.1-1 was discovered to contain a heap-use-after free via the component H5AC_unpin_entry.
- risk 0.57cvss 8.8epss 0.01
An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5MM_xstrdup in H5MM.c when called from H5O_dtype_decode_helper in H5Odtype.c.
- risk 0.57cvss 8.8epss 0.02
An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5VM_memcpyvv in H5VM.c when called from H5D__compact_readvv in H5Dcompact.c.
- risk 0.57cvss 8.8epss 0.02
An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in H5L_extern_query at H5Lexternal.c.
- risk 0.57cvss 8.8epss 0.02
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_sdspace_decode in H5Osdspace.c.
- risk 0.57cvss 8.8epss 0.01
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5VM_memcpyvv in H5VM.c.
- risk 0.57cvss 8.8epss 0.01
An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in the function H5O_pline_reset in H5Opline.c.
- risk 0.57cvss 8.8epss 0.02
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_layout_decode in H5Olayout.c, related to HDmemcpy.
- risk 0.57cvss 8.8epss 0.02
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5T_copy in H5T.c.
- risk 0.57cvss 8.8epss 0.02
In HDF5 1.10.1, there is an out of bounds write vulnerability in the function H5G__ent_decode_vec in H5Gcache.c in libhdf5.a. For example, h5dump would crash or possibly have unspecified other impact someone opens a crafted hdf5 file.
Page 2 of 8