When decoding data out of a dataset encoded with the... · CVE-2016-4331 · GitHub Advisory Database · GitHub

When decoding data out of a dataset encoded with the...

High severity Unreviewed Published May 17, 2022 to the GitHub Advisory Database • Updated Feb 3, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

When decoding data out of a dataset encoded with the H5Z_NBIT decoding, the HDF5 1.8.16 library will fail to ensure that the precision is within the bounds of the size leading to arbitrary code execution.

References

Published by the National Vulnerability Database

Nov 18, 2016

Published to the GitHub Advisory Database May 17, 2022

Last updated Feb 3, 2023

Severity

High

8.6

/ 10

CVSS base metrics

Attack vector

Local

Attack complexity

Low

Privileges required

None

User interaction

Required

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H