Gửi #510819: https://github.com/HDFGroup/hdf5 hfd5 v1.14.6 Heap-based Buffer Overflowthông tin

tiêu đềhttps://github.com/HDFGroup/hdf5 hfd5 v1.14.6 Heap-based Buffer Overflow
Mô tảA heap-buffer-overflow vulnerability was discovered in the H5SM_delete function within the HDF5 Library. This issue occurs when processing certain .h5 files, leading to an out-of-bounds read and potential application crash. The vulnerability arises in the H5SM_delete function defined in H5SM.c at line 1542. The function fails to properly check the buffer boundaries, resulting in a read operation beyond the allocated memory.
Nguồn⚠️ https://github.com/HDFGroup/hdf5/issues/5329
Người dùng
 Anonymous User
Đệ trình27/02/2025 13:14 (cách đây 1 Năm)
Kiểm duyệt10/03/2025 07:49 (11 days later)
Trạng tháiđược chấp nhận
Mục VulDB299064 [HDF5 1.14.6 h5 File H5SM.c H5SM_delete tràn bộ đệm]
điểm20

Do you want to use VulDB in your project?

Use the official API to access entries easily!