CVE-2022-25972: High severity HDFGroup hdf5 vulnerability
Published Aug 22, 2022
·Updated
An out-of-bounds write vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
Affected Software
1 affected component
HDFGroup hdf5=1.10.4
Event History
Aug 22, 2022
CVE Published
via MITRE·06:21 PM
Data Sourced
via MITRE·06:21 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-25972?
The severity of CVE-2022-25972 is classified as high due to its potential for code execution.
2
How do I fix CVE-2022-25972?
To fix CVE-2022-25972, upgrade to the latest version of HDF5 software that addresses this vulnerability.
3
What is an out-of-bounds write vulnerability in CVE-2022-25972?
An out-of-bounds write vulnerability in CVE-2022-25972 occurs when data is written outside the memory allocated for it, possibly leading to corruption and code execution.
4
Can CVE-2022-25972 be exploited remotely?
Yes, CVE-2022-25972 can be exploited remotely if an attacker provides a maliciously crafted GIF file.
5
What software versions are affected by CVE-2022-25972?
CVE-2022-25972 affects HDF5 version 1.10.4.