CVE-2024-29159

What it actually does

Buffer overflow in H5Z__filter_scaleoffset corrupts the instruction pointer, enabling denial of service or arbitrary code execution during HDF5 file processing.

Why it matters to the business

Applications relying on HDF5 for scientific data may experience crashes or compromise, disrupting data pipelines and analysis workflows; the issue has persisted for over two years with low observed exploit activity.

How an attack unfolds

An attacker creates a malicious HDF5 file with specially crafted scaleoffset filter metadata that triggers the buffer overflow on parse; the overflow allows control of the instruction pointer for code execution or crash when the file is opened by vulnerable library code.

How to fix it

Upgrade hdfgroup/hdf5 to commit 88429b015e29c59de604b0f552001fb7cb7ed5d0 or a release after 1.14.3; rebuild dependent applications against the patched library.

How to confirm the fix worked

Confirm library version or git commit hash matches the fixed revision; test processing of scaleoffset-encoded files with the updated library to ensure no overflow occurs.

Typical attack path

1. Craft malicious HDF5 file containing malformed scaleoffset filter data
2. Deliver the file to a target system or application using HDF5
3. Trigger file open or processing operation in the vulnerable library
4. Exploit resulting instruction pointer corruption for denial of service or code execution

How to detect it

Review application and system logs for segmentation faults or crashes during HDF5 file handling; search for error messages referencing scaleoffset filter processing failures.

What your security team should do

• Prioritize upgrade of HDF5 library in all data-processing environments
• Inventory applications and pipelines that depend on HDF5
• Implement file validation or sandboxing for untrusted HDF5 inputs until patched