Vendors / NSF Unidata Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 6
Exploited now NSF Unidata records in CISA KEV No NSF Unidata vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 38
Unidata netcdf-c through 4.10.1 contains an out-of-bounds write vulnerability in NC4_HDF5_inq_attname() that copies HDF5 attribute names into a fixed 256-byte buffer without length validation.
CVSS 4.0 HIGH 8.5· Local · No auth · User interaction · EPSS 0.00184 · Published 2026-09-04 · No fix listed CWE-787
Priority LOW 36
NSF Unidata NetCDF-C Attribute Name Stack-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.0 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00351 · Published 2025-12-23 · No fix listed CWE-121
Priority LOW 36
NSF Unidata NetCDF-C Dimension Name Heap-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.0 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00351 · Published 2025-12-23 · No fix listed CWE-122
Priority LOW 36
NSF Unidata NetCDF-C Variable Name Stack-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.0 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00351 · Published 2025-12-23 · No fix listed CWE-121
Priority LOW 36
NSF Unidata NetCDF-C NC Variable Integer Overflow Remote Code Execution Vulnerability.
CVSS 3.0 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00356 · Published 2025-12-23 · No fix listed CWE-190
Priority LOW 36
NSF Unidata NetCDF-C Time Unit Stack-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.0 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00351 · Published 2025-12-23 · No fix listed CWE-121
Open these records in search → All records by CVSS severity
0 6 0 0 0
THREATIST.IORead the docs