Hao Liu

**Name of the Vulnerable Software and Affected Versions** hdf5 version 1.14.6 **Description** A heap buffer overflow issue was discovered via the H5VM memcpyvv function. **Recommendations** For version 1.14.6, consider restricting the use of the H5VM memcpyvv function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** hdf5 version 1.14.6 **Description** A heap buffer overflow was discovered via the H5Z filter scaleoffset function. **Recommendations** For version 1.14.6, consider disabling the H5Z filter scaleoffset function as a temporary workaround until a patch is available.

**Name of the Vulnerable Software and Affected Versions** libvirt versions prior to 1.1.2 **Description** The issue allows context-dependent attackers to cause a denial of service, resulting in an out-of-bounds read and crash, via a crafted bitmap. This can be achieved by providing a large nodeset value to `numatune`. **Recommendations** For versions prior to 1.1.2, update to version 1.1.2 or later to resolve the issue.