Logo
›
›vulnerability›CVE-2024-32621
Name
CVE-2024-32621
Source
NVD ( link)Debian ( link)
Description
HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5HG_read in H5HG.c (called from H5VL__native_blob_get in H5VLnative_blob.c), resulting in the corruption of the instruction pointer.
CWEs
CWE-122
Published Date
Updated Date
Workaround
-
Advisories
https://www.hdfgroup.org/2024/05/new-hdf5-cve-issues-fixed-in-1-14-4/Issue Tracking
https://www.hdfgroup.org/2024/05/new-hdf5-cve-issues-fixed-in-1-14-4/Issue Tracking

Analysis#

Affected Component
Analysis
hdf5
Exploitable

Vulnerability Ratings#

9.8
CVSSv31
NaN
other

Others affected components#

Name
Project
Project Version
Version
Status
hdf5
yocto
master
2.0.0
Not Affected
hdf5
yocto
scarthgap
1.14.4-3
Not Affected