Vulnerability - CVE-2019-8396

›

›vulnerability›CVE-2019-8396

Name

CVE-2019-8396

Source

NVD ( link)Debian ( link)

Description

A buffer overflow in H5O__layout_encode in H5Olayout.c in the HDF HDF5 through 1.10.4 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while repacking an HDF5 file, aka "Invalid write of size 2."

CWEs

Published Date

Feb 17, 2019

Updated Date

Jun 17, 2026

Workaround

-

Advisories

https://github.com/magicSwordsMan/PAAFS/tree/master/vul4Exploit

https://github.com/magicSwordsMan/PAAFS/tree/master/vul4Exploit

Analysis#

Affected Component

Analysis

Vulnerability Ratings#

6.5

other

4.3

CVSSv2

Others affected components#

Name

Project

Project Version

Version

Status

yocto

master

2.0.0

Not Affected

yocto

scarthgap

1.14.4-3

Not Affected