CVE-2020-10811: Hdfgroup HDF5

Medium severity, CVSS 5.5. EPSS: 1.5% chance of exploitation in the next 30 days.

An issue was discovered in HDF5 through 1.12.0. A heap-based buffer over-read exists in the function H5O__layout_decode() located in H5Olayout.c. It allows an attacker to cause Denial of Service.

Affected products

• Hdfgroup HDF5: up to and including 1.12.0

Published 2020-03-22. Last modified 2026-06-17.