Submit #592588: HDF5 1.14.6 Heap-based Buffer Overflowinfo

TitleHDF5 1.14.6 Heap-based Buffer Overflow
DescriptionA heap-buffer-overflow was detected by AddressSanitizer in the H5FS__sect_find_node function (file: H5FSsection.c). The bug is triggered when the code attempts to remove the first element from a possibly empty or invalid skip list, potentially leading to an out-of-bounds memory read. This can potentially lead to undefined behavior or a crash.
Source⚠️ https://github.com/HDFGroup/hdf5/issues/5580
User
 Rulkallos (UID 86201)
Submission06/08/2025 06:15 (10 months ago)
Moderation06/19/2025 08:19 (11 days later)
StatusAccepted
VulDB entry313274 [HDF5 up to 1.14.6 H5FSsection.c H5FS__sect_find_node heap-based overflow]
Points19

Do you know our Splunk app?

Download it now for free!