Heap-Based Buffer Over-Read in HDF5 Product by The HDF Group
CVE-2020-10811

5.5MEDIUM

Key Information:

Vendor: Hdfgroup
Status: Hdf5
Vendor: CVE Published:; 22 March 2020

What is CVE-2020-10811?

A vulnerability has been identified in HDF5 versions up to 1.12.0, characterized by a heap-based buffer over-read in the H5O__layout_decode() function. This flaw can be exploited by an attacker to trigger a Denial of Service, impacting the application's availability. The issue resides within the layout processing of the data organization format, underscoring the importance of timely patching to mitigate risks associated with data processing operations that utilize this library.