Microsoft Security Response Center guidance
CBL-Mariner Releases
Vendor-listed releases
- 1.14.4-1
- 1.14.4.3-1
Vulnerability intelligence
CVE-2024-29164 and is rated Critical severity with a CVSS score of 9.8. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.
CBL-Mariner Releases
HDF5 through 1.14.3 contains a stack buffer overflow in H5R__decode_heap, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution.