Logo
›
›vulnerability›CVE-2024-32613
Name
CVE-2024-32613
Source
NVD ( link)Debian ( link)
Description
HDF5 Library through 1.14.3 contains a heap-based buffer over-read in the function H5HL__fl_deserialize in H5HLcache.c, a different vulnerability than CVE-2024-32612.
CWEs
CWE-122
Published Date
Updated Date
Workaround
-
Advisories
https://www.hdfgroup.org/2024/05/new-hdf5-cve-issues-fixed-in-1-14-4/Issue Tracking
https://www.hdfgroup.org/2024/05/new-hdf5-cve-issues-fixed-in-1-14-4/Issue Tracking

Analysis#

Affected Component
Analysis
hdf5
Exploitable

Vulnerability Ratings#

7.4
CVSSv31
NaN
other

Others affected components#

Name
Project
Project Version
Version
Status
hdf5
yocto
master
2.0.0
Not Affected
hdf5
yocto
scarthgap
1.14.4-3
Not Affected