An exploit can be delivered via email, chat messages, or social networking. When this vulnerability occurs in software that is used in manufacturing or infrastructure systems, it will likely cause significant damage.

CVE-2019-0027 A remote code execution vulnerability exists in the H5P function of HDF5 Group libhdf5 1.10.4. An attacker can send a specially-crafted H5P file to trigger this vulnerability.

CVE-2019-0028 A remote code execution vulnerability exists in the H5P function of HDF5 Group libhdf5 1.10.4. An attacker can send a specially-crafted H5P file to trigger this vulnerability.

CVE-2019-0029 A remote code execution vulnerability exists in the H5P function of HDF5 Group libhdf5 1.10.4. An attacker can send a specially-crafted H5P file to trigger this vulnerability.

CVE-2019-0030 A remote code execution vulnerability exists in the H5P function of HDF5 Group libhdf5 1.10.4. An attacker can send a specially-crafted H5P file to trigger this vulnerability.

CVE-2019-0031 A remote code execution vulnerability exists in the H5P function of HDF5 Group libhdf5 1.10.4. An attacker can send a specially-crafted H5P file to trigger this vulnerability.

CVE

H5P Function in HDF5 Group libhdf5 1.10.4 Vulnerabilities

A remote code execution vulnerability exists in the H5P function of HDF5 Group libhdf5 1.10.4, which allows an attacker to send a specially-crafted .h5p file to trigger this vulnerability. When this vulnerability is exploited, it will likely result in a denial-of-service condition or other access restriction that limits how the affected software can be used.
The following are some of the possible side effects of exploiting this vulnerability:
HDF5 Group libhdf5 1.10.4 needs to be updated to fix these vulnerabilities
Systems using HDF5 Group libhdf5 1.10.4 need to be patched

Firefox and Firefox Android

The following is a list of vulnerabilities found in Firefox and Firefox Android.

Timeline

Published on: 08/22/2022 19:15:00 UTC
Last modified on: 08/23/2022 16:50:00 UTC

References