CyberRota Analysis
AI-GeneratedThe h5dump tool in F5's HDF5 versions prior to 2.1.1 is vulnerable to an untrusted pointer dereference, which can lead to a denial of service when processing variable-length string datasets in binary mode. This vulnerability arises from improper handling of element stride calculations, resulting in misaligned memory access. Organizations using affected versions should prioritize patching to mitigate potential service disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Untrusted pointer dereference in the render_bin_output function in the h5dump tool in HDF5 before 2.3.0 allows attackers to cause a denial of service via a variable-length string dataset with more than one element dumped in binary mode, which corrupts the per-element stride calculation and causes subsequent elements to be read from a misaligned offset and dereferenced as a pointer.