CVE-2019-9152 PUBLISHED

An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5MM_xstrdup in H5MM.c when called from H5O_dtype_decode_helper in H5Odtype.c.

EPSS 0.40% · 60.2th percentile

Risk Scores

EPSS Score
0.40%
60.2th percentile

Affected Products

VendorProductVersions
Ubuntu:22.04:LTShdf51.10.7+repack-4ubuntu2, 1.10.7+repack-4ubuntu1, 1.10.6+repack-5
Ubuntu:25.10hdf50, 1.14.5+repack-3build1, 1.14.5+repack-3
Ubuntu:Pro:18.04:LTShdf51.10.0-patch1+docs-4, 1.10.0-patch1+docs-4ubuntu0.1~esm2, 1.10.0-patch1+docs-4ubuntu0.1~esm1
Ubuntu:Pro:20.04:LTShdf51.10.4+repack-10, 0, 1.10.4+repack-11
Ubuntu:24.04:LTShdf51.10.10+repack-3.1ubuntu4, 1.10.8+repack1-1ubuntu1, 1.10.10+repack-3ubuntu1
Ubuntu:Pro:14.04:LTShdf50, 1.8.11-5ubuntu2, 1.8.11-5ubuntu1
Ubuntu:Pro:16.04:LTShdf51.8.16+docs-3ubuntu1, 1.8.16+docs-4ubuntu1, 1.8.16+docs-4ubuntu1.1

Timeline

References

Open in Interactive Console →