NetCDF-C vulnerabilities

Unidata netcdf-c through 4.10.1 has an out-of-bounds write vulnerability in NC4_HDF5_inq_attname() that copies HDF5 attribute names into a fixed 256-byte buffer without length validation. Crafted HDF5 files with oversized attribute names can overflow the buffer, causing memory corruption and crashes.

Stack-based buffer overflow in NetCDF-C library when parsing attribute names. Lack of validation of user-supplied data length before copying to a fixed-length stack buffer allows remote code execution.

Heap-based buffer overflow in NetCDF-C library when parsing dimension names. Lack of validation of user-supplied data length before copying to a fixed-length heap buffer allows remote code execution.

Stack-based buffer overflow in NetCDF-C library when parsing variable names. Lack of validation of user-supplied data length before copying to a fixed-length stack buffer allows remote code execution.

Stack-based buffer overflow in NetCDF-C library when parsing time units. Lack of validation of user-supplied data length before copying to a fixed-length stack buffer allows remote code execution.