CVE-2021-37501

Name of the Vulnerable Software and Affected Versions HDF5 versions 1.12.0 through 1.13.0

Description The issue is related to a buffer overflow in the h5tools str sprint function, located in /hdf5/tools/lib/h5tools str.c, which can cause a denial of service. This can be exploited by a remote attacker.

Recommendations For versions 1.12.0 through 1.13.0, consider disabling the h5tools str sprint function as a temporary workaround until a patch is available. Restrict access to the h5dump tool to minimize the risk of exploitation.