HDF5 is a high-performance library and a file format specification that implements the HDF5 data model. If `H5Iget_name` is invoked on a group id with `0` for the size parameter, it will underflow wh…
Medium CVSS 6.5
Summary
HDF5 is a high-performance library and a file format specification that implements the HDF5 data model. If `H5Iget_name` is invoked on a group id with `0` for the size parameter, it will underflow when trying to place a null terminator in the buffer. This can occur if `H5Iget_name` is invoked in a way where `size` can be forced to zero, and there is important data before the `name` buffer.
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://github.com/HDFGroup/hdf5/blob/develop/src/H5Gname.c#L474 Exploit
- https://github.com/HDFGroup/hdf5/security/advisories/GHSA-5c6x-jmgf-f5vc Vendor Advisory
- https://github.com/HDFGroup/hdf5/security/advisories/GHSA-5c6x-jmgf-f5vc Vendor Advisory
Timeline
- nvd_ingest NVD