CVE-2024-32605

Publication date 14 May 2024

Last updated 11 July 2025

Ubuntu priority

Cvss 3 Severity Score

HDF5 Library through 1.14.3 has a heap-based buffer over-read in H5VM_memcpyvv in H5VM.c (called from H5D__compact_readvv in H5Dcompact.c).

Show unmaintained releases

Package	Ubuntu Release	Status
hdf5	26.04 LTS resolute	Not affected
	25.10 questing	Not affected
	25.04 plucky	Ignored end of life, was needs-triage
	24.10 oracular	Ignored end of life, was needs-triage
	24.04 LTS noble	Needs evaluation
	23.10 mantic	Ignored end of life, was needs-triage
	22.04 LTS jammy	Needs evaluation
	20.04 LTS focal	Needs evaluation
	18.04 LTS bionic	Needs evaluation
	16.04 LTS xenial	Needs evaluation
	14.04 LTS trusty	Needs evaluation

CVSS version: CVSS v3.0

Base score 8.8 · High

Base metrics

Scores

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H