HD
Product
hdf5
136
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 19High 56Medium 56Low 5
Watch
Add hdf5 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-6856 | 7.8 | Jun 29 | HDF5 H5FL.c H5FL__reg_gc_list use after free Affected: 1.14.6 |
| CVE-2025-6818 | 7.8 | Jun 28 | HDF5 H5Ochunk.c H5O__chunk_protect heap-based overflow Affected: 1.14.6 |
| CVE-2025-6516 | 7.8 | Jun 23 | HDF5 H5Fint.c H5F_addr_decode_len heap-based overflow Affected: through 1.14.6 |
| CVE-2025-2310 | 7.8 | Mar 14 | HDF5 Metadata Attribute Decoder H5MM_strndup heap-based overflow Affected: 1.14.6 |
| CVE-2025-2309 | 7.8 | Mar 14 | HDF5 Type Conversion Logic H5T__bit_copy heap-based overflow Affected: 1.14.6 |
| CVE-2025-2308 | 7.8 | Mar 14 | HDF5 Scale-Offset Filter H5Z__scaleoffset_decompress_one_byte heap-based overflow Affected: 1.14.6 |
| CVE-2022-26061 | 7.8 | Aug 22 | A heap-based buffer overflow vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4 Affected: 1.10.4 |
| CVE-2022-25972 | 7.8 | Aug 22 | An out-of-bounds write vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4 Affected: 1.10.4 |
| CVE-2022-25942 | 7.8 | Aug 22 | An out-of-bounds read vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4 Affected: 1.10.4 |
| CVE-2018-13875 | 7.8 | Jul 10 | An issue was discovered in the HDF HDF5 1.8.20 library Affected: 1.8.20 |
| CVE-2026-26197 | 7.5 | Jul 20 | Array full size, element count, and element size are not checked to make sure they match in H5Odtype.c Affected: < 2.0.0 |
| CVE-2024-32609 | 7.5 | May 9 | HDF5 Library through 1.14.3 allows stack consumption in the function H5E_printf_stack in H5Eint.c Affected: before 1.14.4 |
| CVE-2021-37501 | 7.5 | Feb 3 | Buffer Overflow vulnerability in HDFGroup hdf5-h5dump 1.12.0 through 1.13.0 allows attackers to cause a denial of service via h5tools_str_sprint in /hdf5/tools/lib/h5tools_str.c Affected: 1.12.0 through 1.13.0 |
| CVE-2024-32624 | 7.4 | May 9 | HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5T__ref_mem_setnull in H5Tref.c (called from H5T__conv_ref in H5Tconv.c), resulting in the corruption of the… Affected: before 1.14.4 |
| CVE-2024-32620 | 7.4 | May 9 | HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5F_addr_decode_len in H5Fint.c, resulting in the corruption of the instruction pointer Affected: before 1.14.4 |
| CVE-2024-32619 | 7.4 | May 9 | HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5T_copy_reopen in H5T.c, resulting in the corruption of the instruction pointer Affected: before 1.14.4 |
| CVE-2024-32618 | 7.4 | May 9 | HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5T__get_native_type in H5Tnative.c, resulting in the corruption of the instruction pointer Affected: before 1.14.4 |
| CVE-2024-32616 | 7.4 | May 9 | HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5O__dtype_encode_helper in H5Odtype.c Affected: before 1.14.4 |
| CVE-2024-32613 | 7.4 | May 9 | HDF5 Library through 1.14.3 contains a heap-based buffer over-read in the function H5HL__fl_deserialize in H5HLcache.c, a different vulnerability than CVE-2024-32612 Affected: before 1.14.4 |
| CVE-2024-32612 | 7.4 | May 9 | HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5HL__fl_deserialize in H5HLcache.c, resulting in the corruption of the instruction pointer, a different… Affected: before 1.14.4 |
| CVE-2024-29165 | 7.4 | May 9 | HDF5 through 1.14.3 contains a buffer overflow in H5Z__filter_fletcher32, resulting in the corruption of the instruction pointer and causing denial of service or potential code… Affected: before 1.14.4 |
| CVE-2024-29163 | 7.4 | May 9 | HDF5 through 1.14.3 contains a heap buffer overflow in H5T__bit_find, resulting in the corruption of the instruction pointer and causing denial of service or potential code… Affected: before 1.14.4 |
| CVE-2024-29162 | 7.4 | May 9 | HDF5 through 1.13.3 and/or 1.14.2 contains a stack buffer overflow in H5HG_read, resulting in denial of service or potential code execution Affected: through 1.14.3 |
| CVE-2024-29160 | 7.4 | May 9 | HDF5 through 1.14.3 contains a heap buffer overflow in H5HG__cache_heap_deserialize, resulting in the corruption of the instruction pointer and causing denial of service or… Affected: before 1.14.4 |
| CVE-2024-29158 | 7.4 | May 9 | HDF5 through 1.14.3 contains a stack buffer overflow in H5FL_arr_malloc, resulting in the corruption of the instruction pointer and causing denial of service or potential code… Affected: through 1.14.3 |
| CVE-2026-26199 | 6.5 | Jul 20 | Buffer underflow in `H5Iget_name `/`H5G_get_name` if size is zero Affected: <= 1.14.6 |
| CVE-2021-46244 | 6.5 | Jan 21 | A Divide By Zero vulnerability exists in HDF5 v1.13.1-1 vis the function H5T__complete_copy () at /hdf5/src/H5T.c Affected: 1.13.1-1 |
| CVE-2021-46243 | 6.5 | Jan 21 | An untrusted pointer dereference vulnerability exists in HDF5 v1.13.1-1 via the function H5O__dtype_decode_helper () at hdf5/src/H5Odtype.c Affected: 1.13.1-1 |
| CVE-2019-8397 | 6.5 | Feb 17 | An issue was discovered in the HDF HDF5 1.10.4 library Affected: 1.10.4 |
| CVE-2019-8396 | 6.5 | Feb 17 | A buffer overflow in H5O__layout_encode in H5Olayout.c in the HDF HDF5 through 1.10.4 library allows attackers to cause a denial of service via a crafted HDF5 file Affected: through 1.10.4 |
| CVE-2019-8398 | 6.5 | Feb 17 | An issue was discovered in the HDF HDF5 1.10.4 library Affected: 1.10.4 |
| CVE-2018-17439 | 6.5 | Sep 24 | An issue was discovered in the HDF HDF5 1.10.3 library Affected: 1.10.3 |
| CVE-2018-17438 | 6.5 | Sep 24 | A SIGFPE signal is raised in the function H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file, because of… Affected: through 1.10.3 |
| CVE-2018-17437 | 6.5 | Sep 24 | Memory leak in the H5O_dtype_decode_helper() function in H5Odtype.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service (memory consumption) via a… Affected: through 1.10.3 |
| CVE-2018-17436 | 6.5 | Sep 24 | ReadCode() in decompress.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service (invalid write access) via a crafted HDF5 file Affected: through 1.10.3 |
| CVE-2018-17435 | 6.5 | Sep 24 | A heap-based buffer over-read in H5O_attr_decode() in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service via a crafted HDF5 file Affected: through 1.10.3 |
| CVE-2018-17434 | 6.5 | Sep 24 | A SIGFPE signal is raised in the function apply_filters() of h5repack_filters.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file, because of… Affected: through 1.10.3 |
| CVE-2018-17433 | 6.5 | Sep 24 | A heap-based buffer overflow in ReadGifImageDesc() in gifread.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service via a crafted HDF5 file Affected: through 1.10.3 |
| CVE-2018-17432 | 6.5 | Sep 24 | A NULL pointer dereference in H5O_sdspace_encode() in H5Osdspace.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service via a crafted HDF5 file Affected: through 1.10.3 |
| CVE-2018-17237 | 6.5 | Sep 20 | A SIGFPE signal is raised in the function H5D__chunk_set_info_real() of H5Dchunk.c in the HDF HDF5 1.10.3 library during an attempted parse of a crafted HDF file, because of… Affected: through 1.10.3 |
| CVE-2018-17234 | 6.5 | Sep 20 | Memory leak in the H5O__chunk_deserialize() function in H5Ocache.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service (memory consumption) via a… Affected: through 1.10.3 |
| CVE-2018-17233 | 6.5 | Sep 20 | A SIGFPE signal is raised in the function H5D__create_chunk_file_map_hyper() of H5Dchunk.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file,… Affected: through 1.10.3 |
| CVE-2018-15671 | 6.5 | Aug 21 | An issue was discovered in the HDF HDF5 1.10.2 library Affected: 1.10.2 |
| CVE-2018-11207 | 6.5 | May 16 | A division by zero was discovered in H5D__chunk_init in H5Dchunk.c in the HDF HDF5 1.10.2 library Affected: 1.10.2 |
| CVE-2018-11204 | 6.5 | May 16 | A NULL pointer dereference was discovered in H5O__chunk_deserialize in H5Ocache.c in the HDF HDF5 1.10.2 library Affected: 1.10.2 |
| CVE-2018-11203 | 6.5 | May 16 | A division by zero was discovered in H5D__btree_decode_key in H5Dbtree.c in the HDF HDF5 1.10.2 library Affected: 1.10.2 |
| CVE-2018-11202 | 6.5 | May 16 | A NULL pointer dereference was discovered in H5S_hyper_make_spans in H5Shyper.c in the HDF HDF5 1.10.2 library Affected: 1.10.2 |
| CVE-2017-17508 | 6.5 | Dec 11 | In HDF5 1.10.1, there is a divide-by-zero vulnerability in the function H5T_set_loc in the H5T.c file in libhdf5.a Affected: 1.10.1 |
| CVE-2017-17507 | 6.5 | Dec 11 | In HDF5 1.10.1, there is an out of bounds read vulnerability in the function H5T_conv_struct_opt in H5Tconv.c in libhdf5.a Affected: 1.10.1 |
| CVE-2017-17506 | 6.5 | Dec 11 | In HDF5 1.10.1, there is an out of bounds read vulnerability in the function H5Opline_pline_decode in H5Opline.c in libhdf5.a Affected: 1.8.0 through 1.10.1 |
