OSV-2023-77

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/hdf5/OSV-2023-77.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2023-77
Published
2023-02-18T13:00:53Z
Modified
2026-10-20T17:25:01Z
Summary
Heap-buffer-overflow in H5C__load_cache_image
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56075

Crash type: Heap-buffer-overflow READ 4
Crash state:
H5C__load_cache_image
H5C_protect
H5AC_protect
References

Affected packages

OSS-Fuzz / hdf5

Package

Name
hdf5
Purl
pkg:generic/hdf5

Affected versions

1.*
1.14.1
hdf5-1.*
hdf5-1.14.5
hdf5-1.14.6
Other
hdf5-1_10_10
hdf5-1_10_11
hdf5-1_12_3
hdf5-1_14_1
hdf5-1_14_1-2
hdf5-1_14_2
hdf5-1_14_3
hdf5-1_14_3-rc1
hdff5-1_14-_0
hdff5-1_14_0
hdf5_1.*
hdf5_1.14.4
hdf5_1.14.4.1
hdf5_1.14.4.2
hdf5_1.14.4.3
hdf5_1.14.5
hdf5_1.14.6
snapshot-1.*
snapshot-1.10
snapshot-1.12
snapshot-1.14

Ecosystem specific

{
    "severity":  "MEDIUM"
}

Database specific

fixed_range
"79bb60c3f6f67411e5d70b84743fc9f6b6143cbc:40324e0c31eef2cfcf0289079c58f81717d65184"
source
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/hdf5/OSV-2023-77.yaml"