PT-2026-20919 · Hdf5 · Hdf5
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
HDF5 versions prior to 1.14.4-2
Description
HDF5 is software used for managing data. An attacker controlling an
h5 file parsed by HDF5 can trigger a write-based heap buffer overflow. This can lead to a denial-of-service condition, and potentially remote code execution depending on exploitability against modern operating systems. The real-world exploitability of remote code execution is currently unknown.Recommendations
Update to version 1.14.4-2 or later.
Exploit
Fix
Heap Based Buffer Overflow
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Hdf5