cvedb.io
CVE-2018-13870
CRITICAL · CVSS 9.8
EPSS exploitation probability: 0%
Published 2018-07-10T21:29:00.450 · Last modified 2026-06-17T01:40:17.880

Summary

An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_link_decode in H5Olink.c.

Affected products

hdfgroup — hdf5

Does this affect you?

Add your gear to cvedb and we'll alert you only when hdfgroup ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.