HDF5 Heap-Based Buffer Overflow Vulnerability in H5FS__sinfo_serialize_node_cb Function

A heap-based buffer overflow vulnerability has been identified in HDF5 version 1.14.6. This issue arises in the function H5FS__sinfo_serialize_node_cb within the file src/H5FScache.c. The vulnerability requires local access to exploit and has been publicly disclosed, with an available proof-of-concept exploit.

Impact

Exploitation of this vulnerability leads to a heap-based buffer overflow, which can commonly result in arbitrary code execution or causing a program to crash.

Reproduction

The vulnerability can be reproduced by compiling HDF5 with AddressSanitizer enabled, using Clang as the compiler. After building the library, the HDF5 extended fuzzer, also available on GitHub, can be used to trigger the vulnerability by sending specially crafted input that exploits the buffer overflow condition.