CVE-2024-29158 in HDF5

Riassunto

di MITRE • 14/05/2024

HDF5 through 1.14.3 contains a stack buffer overflow in H5FL_arr_malloc, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Prenotare: 18/03/2024
• Divulgazione: 14/05/2024
• Moderazione: accettato
• Voce: VDB-263722
• CPE: pronto
• CWE: CWE-121 (confermato)
• CVSS: 5.5 (VulDB)
• EPSS: 0.00225
• KEV: no
• Attività: molto basso
• Settore: Pharma, Industry, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-29158
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-29158
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-29158/