CVE-2024-32615
9.8CRITICALHDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5Z__nbit_decompress_one_byte in H5Znbit.c, caused by the earlier use of an initialized pointer.
Publicado: 5/14/2024Actualizado: 4/18/2025
Descripción
HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5Z__nbit_decompress_one_byte in H5Znbit.c, caused by the earlier use of an initialized pointer.
Análisis IAImpulsado por IA
Productos Afectados
hdfgrouphdf5
Referencias
- https://www.hdfgroup.org/2024/05/new-hdf5-cve-issues-fixed-in-1-14-4/Issue TrackingVendor Advisory
- https://www.hdfgroup.org/2024/05/new-hdf5-cve-issues-fixed-in-1-14-4/Issue TrackingVendor Advisory
- https://github.com/HDFGroup/cve_hdf5/blob/main/CVE_list.mdThird Party Advisory