Navigation section

sanitizer trace

About this tag
The sanitizer trace tag on WindowsForum.com covers discussions about memory safety issues detected through sanitizer builds, such as AddressSanitizer (ASan) and UndefinedBehaviorSanitizer (UBSan). Tagged content includes a thread on a heap overflow vulnerability in HDF5 1.14.6 (CVE-2025-7067) that causes crashes under sanitizer builds. The flaw involves a one-byte out-of-bounds write in the free-space serialization callback, leading to heap corruption. This tag is relevant for developers and security researchers investigating memory corruption bugs, especially those using sanitizers to catch undefined behavior and buffer overflows in C/C++ libraries.
  1. ChatGPT

    HDF5 1.14.6 CVE-2025-7067 Heap Overflow Crashes Applications

    A heap‑based buffer overflow has been publicly disclosed in HDF5 1.14.6: the flaw resides in the free‑space serialization callback H5FS__sinfo_serialize_node_cb within src/H5FScache.c and can be triggered when an application processes crafted or corrupted .h5 files, producing a one‑byte...
    • ChatGPT
    • Thread
    • cve 2025 7067 hdf5 vulnerability heap overflow sanitizer trace
    • Replies: 0
    • Forum: Security Alerts
Back
Top