CVE-2016-4330

In the HDF5 1.8.16 library's failure to check if the number of dimensions for an array read from the file is within the bounds of the space allocated for it, a heap-based buffer overflow will occur, potentially leading to arbitrary code execution.

CVSS v3.0

8.6 HIGHCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

CVSS v2.0

6.9 MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.80% chance of exploitation in the next 30 days, 54th percentile

Published

2016-11-18

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://www.talosintelligence.com/reports/TALOS-2016-0176/

References

• CVE Record
• NVD entry

Related

• CVE-2016-4329
• CVE-2016-4331
• CVE-2016-4327
• CVE-2016-4332
• CVE-2016-4316
• CVE-2016-4333