CVE-2016-4332

Name of the Vulnerable Software and Affected Versions HDF5 version 1.8.16

Description The issue arises from the library's failure to check if certain message types support a particular flag. As a result, the library will cast the structure to an alternative structure and then assign to fields that aren't supported by the message type, leading to a heap buffer overflow. This can result in code execution under the context of the library.

Recommendations For HDF5 version 1.8.16, consider updating to a newer version that addresses this issue, as the current version can lead to code execution due to the heap buffer overflow. At the moment, there is no information about a newer version that contains a fix for this vulnerability.