Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
HDF5 Heap Buffer Overflow Allows Data Exposure
published 3 years ago
Summary
A bug in HDF5 allows attackers to potentially access and read sensitive data outside of its intended boundaries, which could lead to data exposure. This issue affects systems using HDF5, a widely-used data storage and management library. To protect your systems, update to the latest version of HDF5 to ensure you have the necessary patches and fixes.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| OSS-Fuzz | – | hdf5 | All versions |
Original advisory text
Heap-buffer-overflow in H5FS__sect_link
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58622
```
Crash type: Heap-buffer-overflow READ 8
Crash state:
H5FS__sect_link
H5FS_sect_add
H5MF__add_sect
```
```
Crash type: Heap-buffer-overflow READ 8
Crash state:
H5FS__sect_link
H5FS_sect_add
H5MF__add_sect
```
References
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58622 Third Party Advisory
Timeline
Published6 May 2023
Updated12 Mar 2026
First seen6 Mar 2026
Sources
OSV-2023-370 · OSV
Track software like this
Free during beta