Heap Buffer Overflow Vulnerability in HDF5 by The HDF Group
CVE-2024-29160

7.4HIGH

Key Information:

Vendor

The HDF Group

Status
HDF5
Vendor
CVE Published:
14 May 2024

What is CVE-2024-29160?

The HDF5 library versions up to 1.14.3 are impacted by a heap buffer overflow vulnerability located in the H5HG__cache_heap_deserialize function. This flaw can lead to corruption of the instruction pointer, potentially resulting in denial of service or unauthorized code execution. Users of affected versions are strongly advised to upgrade to version 1.14.4 to mitigate risks associated with this security issue.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://www.hdfgroup.org/2024/05/new-hdf5-cve-issues-fixe...

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.