Paper/Archive/CVE-2024-32622

CVE-2024-32622

hdfgroup hdf5 — HDF5 Library through 1.14.3 contains a out-of-bounds read operation in H5FL_arr_malloc in H5FL.c (called from H5S_set_extent_simple in H5…

EPSS 1.0%CVSS 9.1

critical.is priorityof 100

CVSS 9.1 (ADP)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 62.4.624 × 2012.5 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

HDF5 Library through 1.14.3 contains a out-of-bounds read operation in H5FL_arr_malloc in H5FL.c (called from H5S_set_extent_simple in H5S.c).

Affected

ProductAffectedFixed inSource

n/an/a–CNA

hdf5≤ 1.14.3–CISA-ADP

Scores by source

CISA ADP9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refhdfgroup.org/2024/05/new-hdf5-cve-issues-fixed-in-1-14-4