CVE-2024-29165

hdf5: multiple CVEs

HDF5 through 1.14.3 contains a buffer overflow in H5Z__filter_fletcher32, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed

Vendors

Hdfgroup Redhat

Products

Hdf5 Enterprise Linux Ai

CVE-2024-29161

hdf5: multiple CVEs

HDF5 through 1.14.3 contains a heap buffer overflow in H5A__attr_release_table, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Hdfgroup Redhat

Products

Hdf5 Enterprise Linux Ai

CVE-2024-29160

hdf5: multiple CVEs

HDF5 through 1.14.3 contains a heap buffer overflow in H5HG__cache_heap_deserialize, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed

Vendors

Hdfgroup Redhat

Products

Hdf5 Enterprise Linux Ai

CVE-2024-29159

hdf5: multiple CVEs

HDF5 through 1.14.3 contains a buffer overflow in H5Z__filter_scaleoffset, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Hdfgroup Redhat

Products

Hdf5 Enterprise Linux Ai

CVE-2024-29158

hdf5: multiple CVEs

HDF5 through 1.14.3 contains a stack buffer overflow in H5FL_arr_malloc, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed

Vendors

Hdfgroup Redhat

Products

Hdf5 Enterprise Linux Ai

CVE-2024-29162

hdf5: multiple CVEs

HDF5 through 1.13.3 and/or 1.14.2 contains a stack buffer overflow in H5HG_read, resulting in denial of service or potential code execution.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed

Vendors

Hdfgroup Redhat

Products

Hdf5 Enterprise Linux Ai

CVE-2024-29163

hdf5: multiple CVEs

HDF5 through 1.14.3 contains a heap buffer overflow in H5T__bit_find, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed

Vendors

Hdfgroup Redhat

Products

Hdf5 Enterprise Linux Ai

CVE-2024-29164

hdf5: multiple CVEs

HDF5 through 1.14.3 contains a stack buffer overflow in H5R__decode_heap, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Hdfgroup Redhat

Products

Hdf5 Enterprise Linux Ai

CVE-2024-29157

hdf5: multiple CVEs

HDF5 through 1.14.3 contains a heap buffer overflow in H5HG_read, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Hdfgroup Redhat

Products

Hdf5 Enterprise Linux Ai

CVE-2022-25942

hdf5: HDF5 Group libhdf5 gif2h5 out-of-bounds read vulnerability

An out-of-bounds read vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Hdfgroup

Products

Hdf5

CVE-2016-4330

hdf5: H5T_ARRAY heap buffer overflow

In the HDF5 1.8.16 library's failure to check if the number of dimensions for an array read from the file is within the bounds of the space allocated for it, a heap-based buffer overflow will occur, potentially leading to arbitrary code execution.

CVSS 3.0 · 8.6 High EPSS < 1% KEV · Not listed

Vendors

Hdfgroup

Products

Hdf5

CVE-2016-4331

hdf5: H5Z_NBIT heap buffer overflow

When decoding data out of a dataset encoded with the H5Z_NBIT decoding, the HDF5 1.8.16 library will fail to ensure that the precision is within the bounds of the size leading to arbitrary code execution.

CVSS 3.0 · 8.6 High EPSS < 1% KEV · Not listed

Vendors

Hdfgroup

Products

Hdf5

CVE-2016-4332

hdf5: Shareable message type out-of-bounds write

The library's failure to check if certain message types support a particular flag, the HDF5 1.8.16 library will cast the structure to an alternative structure and then assign to fields that aren't supported by the message type and the library will write outside the bounds of the heap buffer. This can lead to code execution under the context of the library.

CVSS 3.0 · 8.6 High EPSS < 1% KEV · Not listed

Vendors

Hdfgroup

Products

Hdf5

CVE-2016-4333

hdf5: H5T_COMPOUND heap buffer overflow

The HDF5 1.8.16 library allocating space for the array using a value from the file has an impact within the loop for initializing said array allowing a value within the file to modify the loop's terminator. Due to this, an aggressor can cause the loop's index to point outside the bounds of the array when initializing it.

CVSS 3.0 · 8.6 High EPSS < 1% KEV · Not listed

Vendors

Hdfgroup

Products

Hdf5

CVE-2021-37501

hdf5: heap buffer overread

Buffer Overflow vulnerability in HDFGroup hdf5-h5dump 1.12.0 through 1.13.0 allows attackers to cause a denial of service via h5tools_str_sprint in /hdf5/tools/lib/h5tools_str.c.

CVSS 3.1 · 7.5 High EPSS 1.5% KEV · Not listed

Vendors

Hdfgroup Redhat

Products

Hdf5 Enterprise Linux Ai

CVE-2024-32608

hdf5: multiple CVEs

HDF5 library through 1.14.3 has memory corruption in H5A__close resulting in the corruption of the instruction pointer and causing denial of service or potential code execution.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Hdfgroup Redhat

Products

Hdf5 Enterprise Linux Ai

CVE-2018-13873

hdf5: buffer over-read in H5O_chunk_deserialize in H5Ocache.c

An issue was discovered in the HDF HDF5 1.8.20 library. There is a buffer over-read in H5O_chunk_deserialize in H5Ocache.c.

CVSS 3.1 · 9.8 Critical EPSS 1.9% KEV · Not listed

Vendors

Hdfgroup

Products

Hdf5

CVE-2022-26061

hdf5: HDF5 Group libhdf5 gif2h5 heap-based buffer overflow vulnerability

A heap-based buffer overflow vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Hdfgroup

Products

Hdf5

CVE-2022-25972

hdf5: HDF5 Group libhdf5 gif2h5 out-of-bounds write vulnerability

An out-of-bounds write vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Hdfgroup

Products

Hdf5

CVE-2021-46244

hdf5: Divide by zero via the function H5T__complete_copy () at /hdf5/src/H5T.c

A Divide By Zero vulnerability exists in HDF5 v1.13.1-1 vis the function H5T__complete_copy () at /hdf5/src/H5T.c. This vulnerability causes an aritmetic exception, leading to a Denial of Service (DoS).

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Hdfgroup

Products

Hdf5