Search for packages
| purl | pkg:conan/hdf5@1.10.4 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 3.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-ppqc-1vsd-1qg6
Aliases: CVE-2022-25972 |
An out-of-bounds write vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability. |
Affected by 0 other vulnerabilities. |
|
VCID-qzz2-61s2-bkca
Aliases: CVE-2022-25942 |
An out-of-bounds read vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability. |
Affected by 0 other vulnerabilities. |
|
VCID-x85j-52ep-z7a4
Aliases: CVE-2022-26061 |
A heap-based buffer overflow vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-05T17:11:35.358552+00:00 | GitLab Importer | Affected by | VCID-ppqc-1vsd-1qg6 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/hdf5/CVE-2022-25972.yml | 38.6.0 |
| 2026-06-05T17:11:35.285513+00:00 | GitLab Importer | Affected by | VCID-qzz2-61s2-bkca | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/hdf5/CVE-2022-25942.yml | 38.6.0 |
| 2026-06-05T17:11:35.209204+00:00 | GitLab Importer | Affected by | VCID-x85j-52ep-z7a4 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/hdf5/CVE-2022-26061.yml | 38.6.0 |