HDF5 is a high-performance library and a file format specification that implements the HDF5 data model. If a file is corrupted such that an array datatype's size, the number of elements, and the element size are not in agreement it can trigger an out of bounds read. The array datatype stores the full size of the datatype (`dt->shared->size`) separately from the number of elements (`dt->shared->u.array.nelem`) and the element size (`dt->shared->parent->shared->size…

Affected: openEuler:22.03-LTS-SP4: hdf5

HDF5 is a data model, library, and file format for storing and managing data. It supports an unlimited variety of datatypes, and is designed for flexible and efficient I/O and for high volume and complex data. HDF5 is portable and is extensible, allowing applications to evolve in their use of HDF5. The HDF5 Technology suite includes tools and applications for managing, manipulating, viewing, and analyzing data in the HDF5 format.…

hdf5: HDF5: Denial of Service via crafted file requiring user interaction hdf5: HDF5 library: Denial of Service via crafted HDF5 file processing hdf5: HDF5: Denial of Service due to malformed chunk data in files hdf5: HDF5: Out-of-bounds read due to corrupted file can lead to denial of service hdf5: HDF5 h5dump: Arbitrary code execution via a crafted HDF5 file HDF5: HDF5: Memory corruption via crafted HDF5 file

Affected: Ubuntu:Pro:14.04:LTS: hdf5, Ubuntu:Pro:16.04:LTS: hdf5, Ubuntu:Pro:18.04:LTS: hdf5, Ubuntu:Pro:20.04:LTS: hdf5, Ubuntu:22.04:LTS: hdf5, Ubuntu:24.04:LTS: hdf5, Ubuntu:26.04:LTS: hdf5

HDF5 is a high-performance library and a file format specification that implements the HDF5 data model. If a file is corrupted such that an array datatype's size, the number of elements, and the element size are not in agreement it can trigger an out of bounds read. The arra…