Priority HIGH 73
hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5Z__filter_scaleoffset function.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00474 · Published 2025-05-30 · Fix deferred CWE-122
Priority HIGH 73
hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5VM_memcpyvv function.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00458 · Published 2025-05-30 · Fix deferred CWE-122
Priority HIGH 73
Buffer Overflow vulnerability in function H5S_close in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01012 · Published 2023-08-22 · Will not fix CWE-787
Priority HIGH 72
Buffer Overflow vulnerability in HDFGroup hdf5-h5dump 1.12.0 through 1.13.0 allows attackers to cause a denial of service via h5tools_str_sprint in /hdf5/tools/lib/h5tools_str.c.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01545 · Published 2023-02-03 · Fixed CWE-787
Priority HIGH 69
HDF5 is software for managing data.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.002 · Published 2026-04-09 · Partial fix CWE-416
Priority HIGH 69
NULL pointer dereference in H5Pget_fill_value in HDF5 before 2.3.0 allows attackers to cause a denial of service via a dataset whose version 1 or 2 fill value message has the "defined" flag set together with a negative s…
CVSS 4.0HIGH 8.2· Local · No auth · User interaction · EPSS 0.00185 · Published 2026-08-05 · Partial fix CWE-476
Priority HIGH 69
A heap-based buffer overflow vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00657 · Published 2022-08-22 · No fix listed CWE-122
Priority HIGH 69
An out-of-bounds write vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00626 · Published 2022-08-22 · No fix listed CWE-787
Priority HIGH 69
An out-of-bounds read vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00613 · Published 2022-08-22 · No fix listed CWE-125
Priority MEDIUM 64
The H5Z__nbit_decompress_one_byte, H5Z__nbit_decompress_one_nooptype, and H5Z__nbit_decompress_one_atomic functions in H5Znbit.c in HDF5 prior to 2.3.0 advance a read index into the compressed chunk buffer without boundi…
CVSS 4.0MEDIUM 6.9· Local · No auth · User interaction · EPSS 0.00195 · Published 2026-08-05 · Partial fix CWE-125
Priority MEDIUM 63
H5Z__filter_fletcher32 in H5Zfletcher32.c in HDF5 prior to 2.3.0 computes the data length to checksum by subtracting the 4-byte trailing checksum size from the input buffer size without checking that the buffer is at lea…
CVSS 4.0MEDIUM 6.8· Local · No auth · User interaction · EPSS 0.00195 · Published 2026-08-05 · Partial fix CWE-125
Priority MEDIUM 63
H5Z__filter_nbit in H5Znbit.c in HDF5 prior to 2.3.0 dereferences cd_values[0] through cd_values[4] without validating that cd_values is non-NULL or that cd_nelmts is at least 5, the fixed size of the filter's header.
CVSS 4.0MEDIUM 6.8· Local · No auth · User interaction · EPSS 0.00195 · Published 2026-08-05 · Partial fix CWE-1284
Priority MEDIUM 63
H5O__layout_decode in H5Olayout.c in HDF5 through 2.3.0 does not validate that a chunked dataset's stored chunk-layout dimensionality matches its dataspace rank when an existing dataset is opened, whereas this check is p…
CVSS 4.0MEDIUM 6.8· Local · No auth · User interaction · EPSS 0.00172 · Published 2026-08-05 · Partial fix CWE-369
Priority MEDIUM 63
Untrusted pointer dereference in the render_bin_output function in the h5dump tool in HDF5 before 2.3.0 allows attackers to cause a denial of service via a variable-length string dataset with more than one element dumped…
CVSS 4.0MEDIUM 6.8· Local · No auth · User interaction · EPSS 0.00172 · Published 2026-08-05 · Fix deferred CWE-822
Priority MEDIUM 60
HDF5 is a high-performance library and a file format specification that implements the HDF5 data model.
CVSS 4.0MEDIUM 5.9· Network · No auth · User interaction · EPSS 0.00351 · Published 2026-07-20 · Fix deferred CWE-124
Priority MEDIUM 60
HDF5 is a high-performance library and a file format specification that implements the HDF5 data model.
CVSS 4.0MEDIUM 5.9· Network · No auth · User interaction · EPSS 0.00367 · Published 2026-07-20 · Partial fix · 2.0.0 CWE-125
Priority MEDIUM 58
HDF5 is software for managing data.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00221 · Published 2026-04-10 · No fix listed CWE-122
Priority MEDIUM 55
A vulnerability, which was classified as problematic, was found in HDF5 1.14.6.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00275 · Published 2025-07-04 · Fix deferred CWE-119
Priority MEDIUM 55
A vulnerability, which was classified as problematic, has been found in HDF5 1.14.6.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00248 · Published 2025-07-04 · Fix deferred CWE-401
Priority MEDIUM 55
A vulnerability classified as problematic was found in HDF5 1.14.6.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00275 · Published 2025-07-04 · Fix deferred CWE-119
Priority MEDIUM 55
A vulnerability was found in HDF5 1.14.6 and classified as problematic.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00248 · Published 2025-06-29 · Fix deferred CWE-404
Priority MEDIUM 55
A vulnerability has been found in HDF5 1.14.6 and classified as problematic.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.0029 · Published 2025-06-29 · Fix deferred CWE-119
Priority MEDIUM 55
A vulnerability, which was classified as problematic, was found in HDF5 1.14.6.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00254 · Published 2025-06-29 · Fix deferred CWE-119
Priority MEDIUM 55
A vulnerability, which was classified as problematic, was found in HDF5 1.14.6.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00306 · Published 2025-06-28 · Fix deferred CWE-119
Priority MEDIUM 55
A vulnerability, which was classified as problematic, has been found in HDF5 1.14.6.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00233 · Published 2025-06-28 · Fix deferred CWE-400
Load more
THREATIST.IORead the docs