CVE-2021-46243

hdf5: Untrusted pointer dereference via the function H5O__dtype_decode_helper at hdf5/src/H5Odtype.c

An untrusted pointer dereference vulnerability exists in HDF5 v1.13.1-1 via the function H5O__dtype_decode_helper () at hdf5/src/H5Odtype.c. This vulnerability can lead to a Denial of Service (DoS).

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Hdfgroup

Products

Hdf5

CVE-2021-46242

hdf5: Heap-use-after free via the component H5AC_unpin_entry

HDF5 v1.13.1-1 was discovered to contain a heap-use-after free via the component H5AC_unpin_entry.

CVSS 3.1 · 8.8 High EPSS 1.2% KEV · Not listed

Vendors

Hdfgroup

Products

Hdf5

CVE-2021-45833

hdf5: stack buffer overflow in the H5D__create_chunk_file_map_hyper function

A Stack-based Buffer Overflow Vulnerability exists in HDF5 1.13.1-1 via the H5D__create_chunk_file_map_hyper function in /hdf5/src/H5Dchunk.c, which causes a Denial of Service (context-dependent).

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Hdfgroup

Products

Hdf5

CVE-2021-45832

hdf5: stack buffer overflow in hdf5/src/H5Eint.c

A Stack-based Buffer Overflow Vulnerability exists in HDF5 1.13.1-1 at at hdf5/src/H5Eint.c, which causes a Denial of Service (context-dependent).

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Hdfgroup

Products

Hdf5

CVE-2021-45830

hdf5: heap buffer overflow vulnerability in H5F_addr_decode_len in /hdf5/src/H5Fint.c

A heap-based buffer overflow vulnerability exists in HDF5 1.13.1-1 via H5F_addr_decode_len in /hdf5/src/H5Fint.c, which could cause a Denial of Service.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Hdfgroup

Products

Hdf5

CVE-2021-45829

hdf5: segmentation fault may cause a Denial of Service

HDF5 1.13.1-1 is affected by: segmentation fault, which causes a Denial of Service.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Hdfgroup

Products

Hdf5

CVE-2020-18494

hdf5: Buffer overflow in function H5S_close at H5S.c

Buffer Overflow vulnerability in function H5S_close in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file.

CVSS 3.1 · 8.8 High EPSS 1.0% KEV · Not listed

Vendors

Hdfgroup

Products

Hdf5

CVE-2020-18232

hdf5: Buffer Overflow in function H5S_close in H5S.c

Buffer Overflow vulnerability in function H5S_close in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file.

CVSS 3.1 · 8.8 High EPSS 1.1% KEV · Not listed

Vendors

Hdfgroup

Products

Hdf5

CVE-2020-10812

hdf5: Null pointer dereference in function H5F_get_nrefs() in H5Fquery.c

An issue was discovered in HDF5 through 1.12.0. A NULL pointer dereference exists in the function H5F_get_nrefs() located in H5Fquery.c. It allows an attacker to cause Denial of Service.

CVSS 3.1 · 5.5 Medium EPSS 1.5% KEV · Not listed

Vendors

Hdfgroup

Products

Hdf5

CVE-2020-10811

hdf5: Heap-based buffer over-read in function H5O__layout_decode() in H5Olayout.c

An issue was discovered in HDF5 through 1.12.0. A heap-based buffer over-read exists in the function H5O__layout_decode() located in H5Olayout.c. It allows an attacker to cause Denial of Service.

CVSS 3.1 · 5.5 Medium EPSS 1.5% KEV · Not listed

Vendors

Hdfgroup

Products

Hdf5

CVE-2020-10810

hdf5: Null pointer dereference in function H5AC_unpin_entry() in H5AC.c

An issue was discovered in HDF5 through 1.12.0. A NULL pointer dereference exists in the function H5AC_unpin_entry() located in H5AC.c. It allows an attacker to cause Denial of Service.

CVSS 3.1 · 5.5 Medium EPSS 1.5% KEV · Not listed

Vendors

Hdfgroup

Products

Hdf5

CVE-2020-10809

hdf5: Heap-based buffer overflow in function Decompress() in decompress.c

An issue was discovered in HDF5 through 1.12.0. A heap-based buffer overflow exists in the function Decompress() located in decompress.c. It can be triggered by sending a crafted file to the gif2h5 binary. It allows an attacker to cause Denial of Service.

CVSS 3.1 · 5.5 Medium EPSS 1.5% KEV · Not listed

Vendors

Hdfgroup

Products

Hdf5

CVE-2019-9152

hdf5: out of bounds read in function H5MM_xstrdup in H5MM.c

An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5MM_xstrdup in H5MM.c when called from H5O_dtype_decode_helper in H5Odtype.c.

CVSS 3.0 · 8.8 High EPSS 1.5% KEV · Not listed

Vendors

Hdfgroup

Products

Hdf5

CVE-2019-9151

hdf5: out of bounds read in function H5VM_memcpyvv in H5VM.c

An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5VM_memcpyvv in H5VM.c when called from H5D__compact_readvv in H5Dcompact.c.

CVSS 3.0 · 8.8 High EPSS 1.6% KEV · Not listed

Vendors

Hdfgroup

Products

Hdf5

CVE-2019-8398

hdf5: Out-of-Bounds Read in function H5T_get_size in H5T.c

An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5T_get_size in H5T.c.

CVSS 3.0 · 6.5 Medium EPSS 1.2% KEV · Not listed

Vendors

Hdfgroup

Products

Hdf5

CVE-2019-8397

hdf5: Out-of-Bounds Read in function H5T_close_real in H5T.c

An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5T_close_real in H5T.c.

CVSS 3.0 · 6.5 Medium EPSS 1.2% KEV · Not listed

Vendors

Hdfgroup

Products

Hdf5

CVE-2019-8396

hdf5: buffer overflow in function H5O__layout_encode in H5Olayout.c

A buffer overflow in H5O__layout_encode in H5Olayout.c in the HDF HDF5 through 1.10.4 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while repacking an HDF5 file, aka "Invalid write of size 2."

CVSS 3.0 · 6.5 Medium EPSS 1.3% KEV · Not listed

Vendors

Hdfgroup

Products

Hdf5

CVE-2018-17439

hdf5: stack-based buffer overflow in H5S_extent_get_dims() in H5S.c

An issue was discovered in the HDF HDF5 1.10.3 library. There is a stack-based buffer overflow in the function H5S_extent_get_dims() in H5S.c. Specifically, this issue occurs while converting an HDF5 file to a GIF file.

CVSS 3.0 · 6.5 Medium EPSS 1.3% KEV · Not listed

Vendors

Hdfgroup

Products

Hdf5

CVE-2018-17438

hdf5: SIGFPE signal in function H5D__select_io() of H5Dselect.c

A SIGFPE signal is raised in the function H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. It could allow a remote denial of service attack.

CVSS 3.0 · 6.5 Medium EPSS 1.7% KEV · Not listed

Vendors

Hdfgroup

Products

Hdf5

CVE-2018-17437

hdf5: memory leak in H5O_dtype_decode_helper() in H5Odtype.c

Memory leak in the H5O_dtype_decode_helper() function in H5Odtype.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service (memory consumption) via a crafted HDF5 file.

CVSS 3.0 · 6.5 Medium EPSS 1.3% KEV · Not listed

Vendors

Hdfgroup

Products

Hdf5