CVE-2024-32624 HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5T__ref_mem_setnull in H5Tref.c (called from H5T__conv_ref in H5Tconv.c) resulting in the corruption of the instruction pointer.

Api.Msrc.Microsoft • February 21, 2026

Share: View original

Information published.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Identified in HDF5 Library Version 1.14.3 Three critical vulnerabilities have been identified in the HDF5 Library version 1.14.3, all related to heap-based buffer overflows. The vulnerabilities, CVE-2024-33877, CVE-2024-33873, and CVE-2024-32624, could lead to memory corruption and potential exploitation. Affected components include H5Tconv.c and H5Dscatgath.c, among others. 3 sources 42

Extracted Entities

Attack Types (1)

Zero-day Exploit

CVEs (1)

Platforms (1)