CVE-2024-33877 HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5T__conv_struct_opt in H5Tconv.c.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Identified in HDF5 Library Version 1.14.3 Three critical vulnerabilities have been identified in the HDF5 Library version 1.14.3, all related to heap-based buffer overflows. The vulnerabilities, CVE-2024-33877, CVE-2024-33873, and CVE-2024-32624, could lead to memory corruption and potential exploitation. Affected components include H5Tconv.c and H5Dscatgath.c, among others. 3 sources 42