Logo
›
›vulnerability›CVE-2024-32624
Name
CVE-2024-32624
Source
NVD ( link)Debian ( link)
Description
HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5T__ref_mem_setnull in H5Tref.c (called from H5T__conv_ref in H5Tconv.c), resulting in the corruption of the instruction pointer.
CWEs
CWE-122
Published Date
Updated Date
Workaround
-
Advisories
https://www.hdfgroup.org/2024/05/new-hdf5-cve-issues-fixed-in-1-14-4/Issue Tracking
https://www.hdfgroup.org/2024/05/new-hdf5-cve-issues-fixed-in-1-14-4/Issue Tracking

Analysis#

Affected Component
Analysis
hdf5
Exploitable

Vulnerability Ratings#

7.4
CVSSv31
NaN
other

Others affected components#

Name
Project
Project Version
Version
Status
hdf5
yocto
master
2.0.0
Not Affected
hdf5
yocto
scarthgap
1.14.4-3
Not Affected