CVE-2020-10809: Hdfgroup HDF5

Medium severity, CVSS 5.5. EPSS: 1.5% chance of exploitation in the next 30 days.

An issue was discovered in HDF5 through 1.12.0. A heap-based buffer overflow exists in the function Decompress() located in decompress.c. It can be triggered by sending a crafted file to the gif2h5 binary. It allows an attacker to cause Denial of Service.

Affected products

• Hdfgroup HDF5: up to and including 1.12.0

Published 2020-03-22. Last modified 2026-06-17.