CyberRota Analysis
AI-GeneratedThe vulnerability affects the HDF5 library, specifically in the H5Z__filter_fletcher32 function, where insufficient validation of buffer sizes can lead to a size_t underflow. This flaw allows attackers to craft HDF5 files that, when processed, can trigger a denial of service by causing out-of-bounds reads and application crashes. Organizations using F5 products that rely on HDF5 should prioritize patching this vulnerability to mitigate potential disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
H5Z__filter_fletcher32 in H5Zfletcher32.c in HDF5 through 2.3.0 computes the data length to checksum by subtracting the 4-byte trailing checksum size from the input buffer size without checking that the buffer is at least 4 bytes, allowing a size_t underflow. This allows attackers to cause a denial of service (massively out-of-bounds read and application crash in H5_checksum_fletcher32) via a crafted HDF5 file with a Fletcher32-filtered chunk smaller than 4 bytes, triggered via H5Dread, e.g. by the h5ls or h5dump tools.