CyberRota Analysis
AI-GeneratedThe vulnerability affects the HDF5 library used in F5 products, where improper handling of the `H5Iget_name` function can lead to a buffer underflow if the size parameter is set to zero. This flaw may allow an attacker to manipulate memory, potentially exposing sensitive data stored prior to the name buffer. Organizations utilizing F5 products that rely on HDF5 should prioritize patching to mitigate the risk of data exposure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
HDF5 is a high-performance library and a file format specification that implements the HDF5 data model. If `H5Iget_name` is invoked on a group id with `0` for the size parameter, it will underflow when trying to place a null terminator in the buffer. This can occur if `H5Iget_name` is invoked in a way where `size` can be forced to zero, and there is important data before the `name` buffer.
Related CVEs
Other vulnerabilities affecting the same vendor(s)