Hdfgroup vulnerabilities, page 4

141 vulnerabilities

Known vulnerabilities in Hdfgroup products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.

RoutineCVE-2024-32610hdfgroup · hdf5 +2 morehdfgroup hdf5HDF5 Library through 1.14.3 has a SEGV in H5T_close_real in H5T.c, resulting in a corrupted instruction pointer.CVSS5.7MediumEPSS0.23%PrioritiseCVE-2024-32609hdfgroup · hdf5 +2 morehdfgroup hdf5HDF5 Library through 1.14.3 allows stack consumption in the function H5E_printf_stack in H5Eint.c.CVSS7.5HighEPSS0.80%RoutineCVE-2024-32607hdfgroup · hdf5 +2 morehdfgroup hdf5HDF5 Library through 1.14.3 has a SEGV in H5A__close in H5Aint.c, resulting in the corruption of the instruction pointer.CVSS5.7MediumEPSS0.23%RoutineCVE-2024-32606hdfgroup · hdf5 +2 morehdfgroup hdf5HDF5 Library through 1.14.3 may attempt to dereference uninitialized values in h5tools_str_sprint in tools/lib/h5tools_str.c (called from h5tools_dump_simple_data in tools/lib/h5tools_dump.c).CVSS5.7MediumEPSS0.23%RoutineCVE-2024-32605hdfgroup · hdf5 +2 morehdfgroup hdf5HDF5 Library through 1.14.3 has a heap-based buffer over-read in H5VM_memcpyvv in H5VM.c (called from H5D__compact_readvv in H5Dcompact.c).CVSS8.8HighEPSS0.94%RoutineCVE-2024-29166hdfgroup · hdf5 +2 morehdfgroup hdf5HDF5 through 1.14.3 contains a buffer overflow in H5O__linfo_decode, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution.CVSS5.7MediumEPSS0.21%RoutineCVE-2024-29165hdfgroup · hdf5 +2 morehdfgroup hdf5HDF5 through 1.14.3 contains a buffer overflow in H5Z__filter_fletcher32, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution.CVSS7.4HighEPSS0.23%PrioritiseCVE-2024-29164hdfgroup · hdf5 +2 morehdfgroup hdf5HDF5 through 1.14.3 contains a stack buffer overflow in H5R__decode_heap, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution.CVSS9.8CriticalEPSS0.86%RoutineCVE-2024-29163hdfgroup · hdf5 +2 morehdfgroup hdf5HDF5 through 1.14.3 contains a heap buffer overflow in H5T__bit_find, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution.CVSS7.4HighEPSS0.22%RoutineCVE-2024-29162hdfgroup · hdf5 +2 morehdfgroup hdf5HDF5 through 1.13.3 and/or 1.14.2 contains a stack buffer overflow in H5HG_read, resulting in denial of service or potential code execution.CVSS7.4HighEPSS0.22%RoutineCVE-2024-29161hdfgroup · hdf5 +2 morehdfgroup hdf5HDF5 through 1.14.3 contains a heap buffer overflow in H5A__attr_release_table, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution.CVSS8.8HighEPSS0.86%RoutineCVE-2024-29160hdfgroup · hdf5 +2 morehdfgroup hdf5HDF5 through 1.14.3 contains a heap buffer overflow in H5HG__cache_heap_deserialize, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution.CVSS7.4HighEPSS0.22%PrioritiseCVE-2024-29159hdfgroup · hdf5 +2 morehdfgroup hdf5HDF5 through 1.14.3 contains a buffer overflow in H5Z__filter_scaleoffset, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution.CVSS9.8CriticalEPSS0.92%RoutineCVE-2024-29158hdfgroup · hdf5 +2 morehdfgroup hdf5HDF5 through 1.14.3 contains a stack buffer overflow in H5FL_arr_malloc, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution.CVSS7.4HighEPSS0.22%PrioritiseCVE-2024-29157hdfgroup · hdf5 +2 morehdfgroup hdf5HDF5 through 1.14.3 contains a heap buffer overflow in H5HG_read, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution.CVSS9.8CriticalEPSS0.90%PrioritiseCVE-2020-18494hdfgroup · hdf5 +2 morehdfgroup hdf5Buffer Overflow vulnerability in function H5S_close in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file.CVSS8.8HighEPSS1.01%PrioritiseCVE-2020-18232hdfgroup · hdf5 +2 morehdfgroup hdf5Buffer Overflow vulnerability in function H5S_close in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file.CVSS8.8HighEPSS1.09%PrioritiseCVE-2021-37501hdfgroup · hdf5 +26 morehdfgroup hdf5Buffer Overflow vulnerability in HDFGroup hdf5-h5dump 1.12.0 through 1.13.0 allows attackers to cause a denial of service via h5tools_str_sprint in /hdf5/tools/lib/h5tools_str.c.CVSS7.5HighEPSS1.54%PrioritiseCVE-2022-26061hdf5 group · libhdf5 +3 morehdf5 group libhdf5A heap-based buffer overflow vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.CVSS7.8HighEPSS0.66%PrioritiseCVE-2022-25972hdf5 group · libhdf5 +3 morehdf5 group libhdf5An out-of-bounds write vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.CVSS7.8HighEPSS0.63%