CVE-2024-32608: Critical severity HDFGroup hdf5 vulnerability
Published Oct 9, 2024
·Updated
HDF5 library through 1.14.3 has memory corruption in H5Aclose resulting in the corruption of the instruction pointer and causing denial of service or potential code execution.
Affected Software
1 affected component
HDFGroup hdf5<1.14.4
Event History
Oct 9, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-32608?
CVE-2024-32608 has a critical severity due to its potential for memory corruption leading to denial of service and possible code execution.
2
How do I fix CVE-2024-32608?
To fix CVE-2024-32608, upgrade the HDF5 library to version 1.14.4 or later.
3
What software is affected by CVE-2024-32608?
CVE-2024-32608 affects the HDF5 library versions prior to 1.14.4.
4
What are the potential impacts of CVE-2024-32608?
The potential impacts of CVE-2024-32608 include application crashes, data corruption, and the risk of remote code execution.
5
Is there a workaround for CVE-2024-32608?
Currently, there are no known workarounds for CVE-2024-32608; the best action is to update to the latest version.