0xiviel/poc-netcdf-attr-overflow

PoC: NetCDF-C CDF-5 Attribute Value Count Integer Overflow → Heap Buffer Overflow Vulnerability Integer overflow in ncx_len_* macros (libsrc/ncx.h) when computing attribute data size from nelems (element count) read from a CDF-5 format NetCDF file. The unchecked multiplication nelems * type_size wraps to a small value, causing undersized heap allocation. When NC3_get_att() later reads attribute values using the original (huge) nelems, it overflows both the source… See the full description on the dataset page: https://huggingface.co/datasets/0xiviel/poc-netcdf-attr-overflow.