35
CVE-2016-4333
PoC —CVSS 3.0
8.6 high
EPSS
<1%p47
Published
()
Modified
Description
The HDF5 1.8.16 library allocating space for the array using a value from the file has an impact within the loop for initializing said array allowing a value within the file to modify the loop's terminator. Due to this, an aggressor can cause the loop's index to point outside the bounds of the array when initializing it.
- Vendors
- hdfgroup
- Products
- hdf5
- Weakness
- CWE-119
- Vector
- CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H