We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
A vulnerability, which was classified as problematic, was found in HDF5 1.14.6. Affected is the function H5FS__sect_link_size of the file src/H5FSsection.c. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.
Es wurde eine Schwachstelle in HDF5 1.14.6 gefunden. Sie wurde als problematisch eingestuft. Betroffen hiervon ist die Funktion H5FS__sect_link_size der Datei src/H5FSsection.c. Durch das Manipulieren mit unbekannten Daten kann eine heap-based buffer overflow-Schwachstelle ausgenutzt werden. Der Angriff hat dabei lokal zu erfolgen. Der Exploit steht zur öffentlichen Verfügung.
2025-07-04: | Advisory disclosed |
2025-07-04: | VulDB entry created |
2025-07-04: | VulDB entry last update |
JJLeo (VulDB User)
vuldb.com/?id.314904 (VDB-314904 | HDF5 H5FSsection.c H5FS__sect_link_size heap-based overflow)
vuldb.com/?ctiid.314904 (VDB-314904 | CTI Indicators (IOB, IOC, IOA))
vuldb.com/?submit.602538 (Submit #602538 | HDFGroup HDF5 hdf5 1.14.6 (commit 17c16b6) Heap-based Buffer Overflow)
github.com/HDFGroup/hdf5/issues/5550
github.com/user-attachments/files/20438481/hdf5_crash_2.txt
Support options