Skip to content
OpenAdvisories

Product · The HDF Group

Szip Filter

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 4.7

    Integer Underflow Leads to Out-of-Bounds Read via Truncated Chunk in HDF5 Szip Filter

    HDF5 through 2.2.0 contains an out-of-bounds read vulnerability in H5Z__filter_szip() in src/H5Zszip.c. When decoding a szip-compressed chunk, the function subtracts the 4-byte uncompressed-length header from the chunk length without first verifying that the …