CVE-2024-32624: Buffer Overflow
HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5Trefmemsetnull in H5Tref.c (called from H5Tconvref in H5Tconv.c) resulting in the corruption of the instruction pointer.
Other sources
HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5Trefmemsetnull in H5Tref.c (called from H5Tconvref in H5Tconv.c), resulting in the corruption of the instruction pointer.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-32624?
CVE-2024-32624 is classified as a high severity vulnerability due to its potential for heap-based buffer overflow leading to instruction pointer corruption.
How do I fix CVE-2024-32624?
To fix CVE-2024-32624, upgrade to HDF5 Library version 1.14.4 or later.
What versions of the HDF5 Library are affected by CVE-2024-32624?
CVE-2024-32624 affects HDF5 Library versions up to and including 1.14.3.
What type of vulnerability is CVE-2024-32624?
CVE-2024-32624 is a heap-based buffer overflow vulnerability in the HDF5 Library.
Which function contains the vulnerability in CVE-2024-32624?
The vulnerability in CVE-2024-32624 is located in the H5T__ref_mem_setnull function within H5Tref.c.