CyberSecBulletin

HDF5 Group vulnerabilities

We track 3 vulnerabilities in HDF5 Group products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on August 22, 2022.

3vulnerabilities
0critical
3high
0exploited
7.8average CVSS score

Latest HDF5 Group vulnerabilities

  • 7.8 High severity

    libhdf5: Out-of-bounds Write

    CVE-2022-26061HDF5 Group

    A heap-based buffer overflow vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

  • 7.8 High severity

    libhdf5: Out-of-bounds Write

    CVE-2022-25972HDF5 Group

    An out-of-bounds write vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

  • 7.8 High severity

    libhdf5: Out-of-bounds Read

    CVE-2022-25942HDF5 Group

    An out-of-bounds read vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.