Vulnerabilities (CVE)

Filtered by vendor Hdfgroup Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-18494 1 Hdfgroup 1 Hdf5 2023-08-25 N/A 8.8 HIGH
Buffer Overflow vulnerability in function H5S_close in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file.
CVE-2020-18232 1 Hdfgroup 1 Hdf5 2023-08-25 N/A 8.8 HIGH
Buffer Overflow vulnerability in function H5S_close in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file.
CVE-2018-17234 1 Hdfgroup 1 Hdf5 2023-08-09 4.3 MEDIUM 6.5 MEDIUM
Memory leak in the H5O__chunk_deserialize() function in H5Ocache.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service (memory consumption) via a crafted HDF5 file.
CVE-2018-17237 1 Hdfgroup 1 Hdf5 2023-08-09 4.3 MEDIUM 6.5 MEDIUM
A SIGFPE signal is raised in the function H5D__chunk_set_info_real() of H5Dchunk.c in the HDF HDF5 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. This issue is different from CVE-2018-11207.
CVE-2018-17434 1 Hdfgroup 1 Hdf5 2023-08-09 4.3 MEDIUM 6.5 MEDIUM
A SIGFPE signal is raised in the function apply_filters() of h5repack_filters.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. It could allow a remote denial of service attack.
CVE-2018-17437 1 Hdfgroup 1 Hdf5 2023-08-09 4.3 MEDIUM 6.5 MEDIUM
Memory leak in the H5O_dtype_decode_helper() function in H5Odtype.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service (memory consumption) via a crafted HDF5 file.
CVE-2018-17233 1 Hdfgroup 1 Hdf5 2023-08-09 4.3 MEDIUM 6.5 MEDIUM
A SIGFPE signal is raised in the function H5D__create_chunk_file_map_hyper() of H5Dchunk.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. It could allow a remote denial of service attack.
CVE-2018-11206 1 Hdfgroup 1 Hdf5 2023-08-09 5.8 MEDIUM 8.1 HIGH
An out of bounds read was discovered in H5O_fill_new_decode and H5O_fill_old_decode in H5Ofill.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or information disclosure attack.
CVE-2021-45832 1 Hdfgroup 1 Hdf5 2023-08-08 4.3 MEDIUM 5.5 MEDIUM
A Stack-based Buffer Overflow Vulnerability exists in HDF5 1.13.1-1 at at hdf5/src/H5Eint.c, which causes a Denial of Service (context-dependent).
CVE-2021-46244 1 Hdfgroup 1 Hdf5 2022-01-28 4.3 MEDIUM 6.5 MEDIUM
A Divide By Zero vulnerability exists in HDF5 v1.13.1-1 vis the function H5T__complete_copy () at /hdf5/src/H5T.c. This vulnerability causes an aritmetic exception, leading to a Denial of Service (DoS).
CVE-2021-46243 1 Hdfgroup 1 Hdf5 2022-01-28 4.3 MEDIUM 6.5 MEDIUM
An untrusted pointer dereference vulnerability exists in HDF5 v1.13.1-1 via the function H5O__dtype_decode_helper () at hdf5/src/H5Odtype.c. This vulnerability can lead to a Denial of Service (DoS).
CVE-2021-46242 1 Hdfgroup 1 Hdf5 2022-01-28 6.8 MEDIUM 8.8 HIGH
HDF5 v1.13.1-1 was discovered to contain a heap-use-after free via the component H5AC_unpin_entry.
CVE-2021-45830 1 Hdfgroup 1 Hdf5 2022-01-12 4.3 MEDIUM 5.5 MEDIUM
A heap-based buffer overflow vulnerability exists in HDF5 1.13.1-1 via H5F_addr_decode_len in /hdf5/src/H5Fint.c, which could cause a Denial of Service.
CVE-2021-45833 1 Hdfgroup 1 Hdf5 2022-01-12 4.3 MEDIUM 5.5 MEDIUM
A Stack-based Buffer Overflow Vulnerability exists in HDF5 1.13.1-1 via the H5D__create_chunk_file_map_hyper function in /hdf5/src/H5Dchunk.c, which causes a Denial of Service (context-dependent).
CVE-2021-45829 1 Hdfgroup 1 Hdf5 2022-01-11 4.3 MEDIUM 5.5 MEDIUM
HDF5 1.13.1-1 is affected by: segmentation fault, which causes a Denial of Service.
CVE-2018-13876 1 Hdfgroup 1 Hdf5 2020-08-24 7.5 HIGH 9.8 CRITICAL
An issue was discovered in the HDF HDF5 1.8.20 library. There is a stack-based buffer overflow in the function H5FD_sec2_read in H5FDsec2.c, related to HDread.
CVE-2018-13871 1 Hdfgroup 1 Hdf5 2020-08-24 7.5 HIGH 9.8 CRITICAL
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer overflow in the function H5FL_blk_malloc in H5FL.c.
CVE-2018-13872 1 Hdfgroup 1 Hdf5 2020-08-24 7.5 HIGH 9.8 CRITICAL
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer overflow in the function H5G_ent_decode in H5Gent.c.
CVE-2018-13874 1 Hdfgroup 1 Hdf5 2020-08-24 7.5 HIGH 9.8 CRITICAL
An issue was discovered in the HDF HDF5 1.8.20 library. There is a stack-based buffer overflow in the function H5FD_sec2_read in H5FDsec2.c, related to HDmemset.
CVE-2018-17433 1 Hdfgroup 1 Hdf5 2020-08-24 4.3 MEDIUM 6.5 MEDIUM
A heap-based buffer overflow in ReadGifImageDesc() in gifread.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while converting a GIF file to an HDF file.
CVE-2018-17439 1 Hdfgroup 1 Hdf5 2020-08-24 4.3 MEDIUM 6.5 MEDIUM
An issue was discovered in the HDF HDF5 1.10.3 library. There is a stack-based buffer overflow in the function H5S_extent_get_dims() in H5S.c. Specifically, this issue occurs while converting an HDF5 file to a GIF file.
CVE-2020-10812 1 Hdfgroup 1 Hdf5 2020-04-30 4.3 MEDIUM 5.5 MEDIUM
An issue was discovered in HDF5 through 1.12.0. A NULL pointer dereference exists in the function H5F_get_nrefs() located in H5Fquery.c. It allows an attacker to cause Denial of Service.
CVE-2020-10811 1 Hdfgroup 1 Hdf5 2020-04-30 4.3 MEDIUM 5.5 MEDIUM
An issue was discovered in HDF5 through 1.12.0. A heap-based buffer over-read exists in the function H5O__layout_decode() located in H5Olayout.c. It allows an attacker to cause Denial of Service.
CVE-2020-10810 1 Hdfgroup 1 Hdf5 2020-04-30 4.3 MEDIUM 5.5 MEDIUM
An issue was discovered in HDF5 through 1.12.0. A NULL pointer dereference exists in the function H5AC_unpin_entry() located in H5AC.c. It allows an attacker to cause Denial of Service.
CVE-2020-10809 1 Hdfgroup 1 Hdf5 2020-04-30 4.3 MEDIUM 5.5 MEDIUM
An issue was discovered in HDF5 through 1.12.0. A heap-based buffer overflow exists in the function Decompress() located in decompress.c. It can be triggered by sending a crafted file to the gif2h5 binary. It allows an attacker to cause Denial of Service.
CVE-2018-17435 1 Hdfgroup 1 Hdf5 2019-10-03 4.3 MEDIUM 6.5 MEDIUM
A heap-based buffer over-read in H5O_attr_decode() in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while converting an HDF file to GIF file.
CVE-2018-13870 1 Hdfgroup 1 Hdf5 2019-10-03 7.5 HIGH 9.8 CRITICAL
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_link_decode in H5Olink.c.
CVE-2018-13868 1 Hdfgroup 1 Hdf5 2019-10-03 7.5 HIGH 9.8 CRITICAL
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_fill_old_decode in H5Ofill.c.
CVE-2018-13866 1 Hdfgroup 1 Hdf5 2019-10-03 7.5 HIGH 9.8 CRITICAL
An issue was discovered in the HDF HDF5 1.8.20 library. There is a stack-based buffer over-read in the function H5F_addr_decode_len in H5Fint.c.
CVE-2018-13873 1 Hdfgroup 1 Hdf5 2019-10-03 7.5 HIGH 9.8 CRITICAL
An issue was discovered in the HDF HDF5 1.8.20 library. There is a buffer over-read in H5O_chunk_deserialize in H5Ocache.c.
CVE-2018-11207 1 Hdfgroup 1 Hdf5 2019-03-21 4.3 MEDIUM 6.5 MEDIUM
A division by zero was discovered in H5D__chunk_init in H5Dchunk.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack.
CVE-2019-9151 1 Hdfgroup 1 Hdf5 2019-02-26 6.8 MEDIUM 8.8 HIGH
An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5VM_memcpyvv in H5VM.c when called from H5D__compact_readvv in H5Dcompact.c.
CVE-2019-9152 1 Hdfgroup 1 Hdf5 2019-02-26 6.8 MEDIUM 8.8 HIGH
An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5MM_xstrdup in H5MM.c when called from H5O_dtype_decode_helper in H5Odtype.c.
CVE-2019-8396 1 Hdfgroup 1 Hdf5 2019-02-19 4.3 MEDIUM 6.5 MEDIUM
A buffer overflow in H5O__layout_encode in H5Olayout.c in the HDF HDF5 through 1.10.4 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while repacking an HDF5 file, aka "Invalid write of size 2."
CVE-2019-8397 1 Hdfgroup 1 Hdf5 2019-02-19 4.3 MEDIUM 6.5 MEDIUM
An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5T_close_real in H5T.c.
CVE-2019-8398 1 Hdfgroup 1 Hdf5 2019-02-19 4.3 MEDIUM 6.5 MEDIUM
An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5T_get_size in H5T.c.
CVE-2018-17436 1 Hdfgroup 1 Hdf5 2018-11-09 4.3 MEDIUM 6.5 MEDIUM
ReadCode() in decompress.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service (invalid write access) via a crafted HDF5 file. This issue was triggered while converting a GIF file to an HDF file.
CVE-2018-17438 1 Hdfgroup 1 Hdf5 2018-11-09 4.3 MEDIUM 6.5 MEDIUM
A SIGFPE signal is raised in the function H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. It could allow a remote denial of service attack.
CVE-2018-17432 1 Hdfgroup 1 Hdf5 2018-11-09 4.3 MEDIUM 6.5 MEDIUM
A NULL pointer dereference in H5O_sdspace_encode() in H5Osdspace.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service via a crafted HDF5 file.
CVE-2018-16438 1 Hdfgroup 1 Hdf5 2018-10-26 6.8 MEDIUM 8.8 HIGH
An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in H5L_extern_query at H5Lexternal.c.
CVE-2018-15671 1 Hdfgroup 1 Hdf5 2018-10-16 4.3 MEDIUM 6.5 MEDIUM
An issue was discovered in the HDF HDF5 1.10.2 library. Excessive stack consumption has been detected in the function H5P__get_cb() in H5Pint.c during an attempted parse of a crafted HDF file. This results in denial of service.
CVE-2018-14033 1 Hdfgroup 1 Hdf5 2018-09-11 6.8 MEDIUM 8.8 HIGH
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_layout_decode in H5Olayout.c, related to HDmemcpy.
CVE-2018-14031 1 Hdfgroup 1 Hdf5 2018-09-11 6.8 MEDIUM 8.8 HIGH
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5T_copy in H5T.c.
CVE-2018-14034 1 Hdfgroup 1 Hdf5 2018-09-11 6.8 MEDIUM 8.8 HIGH
An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in the function H5O_pline_reset in H5Opline.c.
CVE-2018-14035 1 Hdfgroup 1 Hdf5 2018-09-11 6.8 MEDIUM 8.8 HIGH
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5VM_memcpyvv in H5VM.c.
CVE-2018-13875 1 Hdfgroup 1 Hdf5 2018-09-07 6.8 MEDIUM 7.8 HIGH
An issue was discovered in the HDF HDF5 1.8.20 library. There is an out-of-bounds read in the function H5VM_memcpyvv in H5VM.c.
CVE-2018-14460 1 Hdfgroup 1 Hdf5 2018-09-06 6.8 MEDIUM 8.8 HIGH
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_sdspace_decode in H5Osdspace.c.
CVE-2018-13869 1 Hdfgroup 1 Hdf5 2018-08-31 7.5 HIGH 9.8 CRITICAL
An issue was discovered in the HDF HDF5 1.8.20 library. There is a memcpy parameter overlap in the function H5O_link_decode in H5Olink.c.
CVE-2018-13867 1 Hdfgroup 1 Hdf5 2018-08-28 7.5 HIGH 9.8 CRITICAL
An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in the function H5F__accum_read in H5Faccum.c.
CVE-2018-11202 1 Hdfgroup 1 Hdf5 2018-06-18 4.3 MEDIUM 6.5 MEDIUM
A NULL pointer dereference was discovered in H5S_hyper_make_spans in H5Shyper.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack.