Microsoft Security Response Center guidance
CBL-Mariner Releases
Vendor-listed releases
- 1.14.4-1
- 1.14.4.3-1
Vulnerability intelligence
CVE-2024-33875 and is rated Medium severity with a CVSS score of 5.7. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.
CBL-Mariner Releases
HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5O__layout_encode in H5Olayout.c, resulting in the corruption of the instruction pointer.