| Title | HDFGroup hdf5 v1.14.6 Buffer Overflow |
|---|
| Description | The HDF5 library contains a heap-based buffer overflow vulnerability in the H5Z__scaleoffset_decompress_one_byte function. This vulnerability occurs during the decompression of data using the Scale-Offset filter, where the library attempts to read 1 byte of data beyond the bounds of an allocated 26-byte heap memory region. |
|---|
| Source | ⚠️ https://github.com/madao123123/crash_report/blob/main/hdf5_poc/hdf5_poc2.md |
|---|
| User | NPU Unmanned Systems Safety Laboratory (UID 80309) |
|---|
| Submission | 03/05/2025 04:19 (1 Year ago) |
|---|
| Moderation | 03/14/2025 13:55 (9 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 299721 [HDF5 1.14.6 Scale-Offset Filter H5Z__scaleoffset_decompress_one_byte heap-based overflow] |
|---|
| Points | 19 |
|---|