CVE-2018-14460

Impact

An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_sdspace_decode in H5Osdspace.c.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/TeamSeri0us/pocs/blob/master/hdf5/README3.md
• https://github.com/TeamSeri0us/pocs/blob/master/hdf5/README3.md