Stack Buffer Overflow Vulnerability in HDF5 by The HDF Group
CVE-2024-29158

7.4HIGH

Key Information:

Vendor

The HDF Group

Status
HDF5
Vendor
CVE Published:
14 May 2024

What is CVE-2024-29158?

The HDF5 library (up to version 1.14.3) contains a stack buffer overflow vulnerability in the H5FL_arr_malloc function. This flaw allows an attacker to potentially corrupt the instruction pointer, which can lead to denial of service or the execution of arbitrary code. Users are advised to update to the latest version to mitigate any risks associated with this vulnerability.

References

https://www.hdfgroup.org/2024/05/new-hdf5-cve-issues-fixe...

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.
CVE-2024-29158 : Stack Buffer Overflow Vulnerability in HDF5 by The HDF Group