CVE-2018-11206

HIGH

HDF5 1.10.2 - Out-of-bounds Read in H5O_fill_new_decode and H5O_fill_old_decode

Title source: llm

Description

An out of bounds read was discovered in H5O_fill_new_decode and H5O_fill_old_decode in H5Ofill.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or information disclosure attack.

References (3)

Core 3

Core References

Third Party Advisory

https://github.com/TeamSeri0us/pocs/blob/master/hdf5/README2.md

View Writeup ZIP pw:eip

Exploit, Third Party Advisory

https://github.com/Twi1ight/fuzzing-pocs/tree/master/hdf5

View Exploit ZIP pw:eip

Mailing List mailing-list

https://lists.debian.org/debian-lts-announce/2023/08/msg00009.html

Scores

CVSS v3 8.1

EPSS 0.0295

EPSS Percentile 85.4%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Details

CWE

CWE-125

Status published

Products (1)

hdfgroup/hdf5 1.10.2

Published May 16, 2018

Tracked Since Feb 18, 2026