| शीर्षक | HDFGroup hdf5 v1.14.6 Buffer Overflow |
|---|
| विवरण | The HDF5 library contains a heap-based buffer overflow vulnerability in the strndup function, which is called by H5MM_strndup during the decoding of attribute metadata. This vulnerability occurs when the library attempts to read 5 bytes of data beyond the bounds of an allocated 320-byte heap memory region. This could lead to memory corruption, application crashes, or potential exploitation for arbitrary code execution. |
|---|
| स्रोत | ⚠️ https://github.com/madao123123/crash_report/blob/main/hdf5_poc/hdf5_poc4.md |
|---|
| उपयोगकर्ता | NPU Unmanned Systems Safety Laboratory (UID 80309) |
|---|
| सबमिशन | 05/03/2025 04:21 AM (1 वर्ष पहले) |
|---|
| संयम | 14/03/2025 01:55 PM (9 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 299723 [HDF5 1.14.6 Metadata Attribute Decoder H5MM_strndup बफ़र ओवरफ़्लो] |
|---|
| अंक | 20 |
|---|