CVE-2020-18494: Hdfgroup HDF5

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

Buffer Overflow vulnerability in function H5S_close in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file.

Affected products

• Hdfgroup HDF5: version 1.10.4 only

Published 2023-08-22. Last modified 2026-06-17.