HD
Product
HDF5
12
CVEs
0
On KEV
8.5
Max CVSS
2
New 30D
Severity mix
Critical 0High 2Medium 10Low 0
Watch
Add HDF5 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-106547 | 8.5 | Oct 6 | HDF5 heap buffer overflow in H5VM_array_fill via crafted fill-value metadata Affected: 1.10.0 before 2.2.0 |
| CVE-2026-19024 | 8.2 | Aug 5 | HDF5 H5Pget_fill_value NULL Pointer Dereference via Malformed Fill Value Message Affected: <= 2.3.0 |
| CVE-2026-19027 | 6.9 | Aug 5 | HDF5 out-of-bounds heap read in N-Bit filter decompression Affected: <=2.3.0 |
| CVE-2026-19029 | 6.8 | Oct 6 | HDF5 scale-offset filter heap buffer over-read via crafted chunk Affected: < 2.2.0 |
| CVE-2026-19028 | 6.8 | Aug 5 | HDF5 integer underflow in Fletcher32 filter leads to massive out-of-bounds read Affected: <=2.3.0 |
| CVE-2026-19026 | 6.8 | Aug 5 | Nbit filter NULL/short parameter-array dereference Affected: <=2.3.0 |
| CVE-2026-19025 | 6.8 | Aug 5 | HDF5 divide-by-zero (SIGFPE) via mismatched chunk-layout dimensionality and dataspace rank on dataset open Affected: <= 2.3.0 |
| CVE-2026-19023 | 6.8 | Aug 5 | HDF5 h5dump Untrusted Pointer Dereference in Binary Output of Variable-Length String Datasets Affected: <= 2.3.0 |
| CVE-2026-17574 | 5.5 | Jul 27 | NULL Pointer Dereference in HDF5 via Invalid Variable-Length Datatype Type Tag Affected: <= 2.1.1 |
| CVE-2026-17573 | 5.5 | Jul 27 | Double Free in H5D__chunk_copy() in HDF5 via a Crafted Chunk-Index Size Field Affected: <= 2.1.1 |
| CVE-2026-17572 | 5.5 | Jul 27 | HDF5 SOHM List Index Heap Buffer Overflow Affected: <= 2.1.1 |
| CVE-2026-92627 | 4.6 | Sep 16 | Heap Use-After-Free in H5T__conv_f_f Affected: < 1.14.2 |
Showing 12