CVE-2021-37501
HIGHHDF5 1.12.0-1.13.0 - Denial of Service via h5tools_str_sprint Buffer Overflow
Title source: llmDescription
Buffer Overflow vulnerability in HDFGroup hdf5-h5dump 1.12.0 through 1.13.0 allows attackers to cause a denial of service via h5tools_str_sprint in /hdf5/tools/lib/h5tools_str.c.
References (3)
Core 3
Core References
Product, Third Party Advisory
https://github.com/HDFGroup/hdf5
Exploit, Third Party Advisory
https://github.com/ST4RF4LL/Something_Found/blob/main/HDF5_v1.13.0_h5dump_heap_overflow.md
Issue Tracking
https://github.com/HDFGroup/hdf5/issues/2458
Scores
CVSS v3
7.5
EPSS
0.0155
EPSS Percentile
72.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-787
Status
published
Products (1)
hdfgroup/hdf5
1.12.0 - 1.13.0
Published
Feb 03, 2023
Tracked Since
Feb 18, 2026