Heap Buffer Overflow Vulnerability in HDF5 by The HDF Group
CVE-2024-29160

7.4HIGH

Key Information:

Vendor

The HDF Group

Status
HDF5
Vendor
CVE Published:
14 May 2024

What is CVE-2024-29160?

The HDF5 library versions up to 1.14.3 are impacted by a heap buffer overflow vulnerability located in the H5HG__cache_heap_deserialize function. This flaw can lead to corruption of the instruction pointer, potentially resulting in denial of service or unauthorized code execution. Users of affected versions are strongly advised to upgrade to version 1.14.4 to mitigate risks associated with this security issue.

References

https://www.hdfgroup.org/2024/05/new-hdf5-cve-issues-fixe...

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.