CVE-2020-10811

Name of the Vulnerable Software and Affected Versions HDF5 versions through 1.12.0

Description The issue is related to a heap-based buffer over-read in the H5O layout decode() function located in H5Olayout.c. This can allow an attacker to cause a Denial of Service. The vulnerability is associated with a memory read outside the boundaries, which can be exploited to disrupt service.

Recommendations For versions through 1.12.0, consider disabling the H5O layout decode() function as a temporary workaround until a patch is available. Restrict access to the H5Olayout.c file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.