CVE-2018-17436
MEDIUMHDF5 < 1.10.3 - Out-of-bounds Write in decompress.c ReadCode()
Title source: llmDescription
ReadCode() in decompress.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service (invalid write access) via a crafted HDF5 file. This issue was triggered while converting a GIF file to an HDF file.
References (1)
Core 1
Core References
Exploit, Third Party Advisory x_refsource_misc
https://github.com/SegfaultMasters/covering360/tree/master/HDF5/vuln8#invalid-write-memory-access-in-decompressc
Scores
CVSS v3
6.5
EPSS
0.0131
EPSS Percentile
67.4%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Details
CWE
CWE-787
Status
published
Products (1)
hdfgroup/hdf5
< 1.10.3
Published
Sep 24, 2018
Tracked Since
Feb 18, 2026