Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-25972

Опубликовано: 22 авг. 2022
Источник: nvd
CVSS3: 7.8
CVSS3: 7.8
EPSS Низкий

Описание

An out-of-bounds write vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:hdfgroup:hdf5:1.10.4:*:*:*:*:*:*:*

EPSS

Процентиль: 18%
0.00058
Низкий

7.8 High

CVSS3

7.8 High

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 7.8
ubuntu
почти 3 года назад

An out-of-bounds write vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 7.8
redhat
почти 3 года назад

An out-of-bounds write vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 7.8
debian
почти 3 года назад

An out-of-bounds write vulnerability exists in the gif2h5 functionalit ...

CVSS3: 7.8
github
почти 3 года назад

An out-of-bounds write vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 7.8
fstec
почти 3 года назад

Уязвимость компонента decompress.c библиотеки HDF5 libhdf5, позволяющая нарушителю выполнить произвольный код в целевой системе

EPSS

Процентиль: 18%
0.00058
Низкий

7.8 High

CVSS3

7.8 High

CVSS3

Дефекты

CWE-787