CVE-2019-9152

2019-02-2519:00:00

mitre

www.cve.org

hdf5

library

out of bounds read

h5mm_xstrdup function

h5o_dtype_decode_helper

AI Score

8.7

Confidence

High

EPSS

0.002

Percentile

65.1%

JSON

An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5MM_xstrdup in H5MM.c when called from H5O_dtype_decode_helper in H5Odtype.c.

References

github.com/magicSwordsMan/PAAFS/tree/master/vul8