CVE-2024-29165

What it actually does

Buffer overflow in H5Z__filter_fletcher32 corrupts the instruction pointer, enabling denial of service or arbitrary code execution.

Why it matters to the business

Applications processing untrusted HDF5 data face service disruption or potential compromise; the vulnerability affects a widely used data format library with downstream dependents.

How an attack unfolds

An attacker supplies a specially crafted HDF5 file containing malformed Fletcher32 filter data. When the library processes the file locally, the overflow occurs during filter handling, allowing control of the instruction pointer for code execution or crash.

How to fix it

Upgrade udecode/plate to the fixed commit 93dd5712854660874900ae12e4d8e6ff28089eb7 or later; rebuild any dependent packages against the patched HDF5 library version.

How to confirm the fix worked

Confirm the installed udecode/plate commit or HDF5 version is at or above the fixed revision; test with known-malformed Fletcher32 filter inputs to verify absence of overflow behavior.

Typical attack path

1. Identify or deliver a malicious HDF5 file to a vulnerable application
2. Trigger processing of the file via the H5Z__filter_fletcher32 function
3. Exploit the resulting buffer overflow to corrupt the instruction pointer
4. Achieve denial of service or execute attacker-controlled code

How to detect it

Review application logs for crashes or unexpected terminations during HDF5 file processing; inspect process memory dumps for signs of instruction pointer corruption near filter handling routines.

What your security team should do

• Prioritize patching udecode/plate and dependent HDF5 usages within 30 days given the potential for code execution
• Scan build pipelines and dependency manifests for vulnerable HDF5 versions
• Restrict processing of untrusted HDF5 files until upgrades are complete