Microsoft Security Response Center guidance
CBL-Mariner Releases
Vendor-listed releases
- 1.14.4-1
- 1.14.4.3-1
Vulnerability intelligence
CVE-2024-32621 and is rated Critical severity with a CVSS score of 9.8. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.
CBL-Mariner Releases
HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5HG_read in H5HG.c (called from H5VL__native_blob_get in H5VLnative_blob.c), resulting in the corruption of the instruction pointer.