Vulnerabilities

TI-2026-84385 CVE-2026-120758 · GHSA-49fv-ggjg-jcjc

NULL pointer dereference in HDF5 lets crafted files crash the library

LOW 23

HDF5 through 2.2.0 contains a NULL pointer dereference vulnerability in H5HL_unprotect() in src/H5HL.c.

CVSS 4.0MEDIUM 5.4 Local No auth User interaction EPSS 0.0014 Published 2026-11-03 Partial fix · 2.3.0 CWE-476

TI-2026-84384 CVE-2026-120757 · GHSA-2qgq-73w8-3hrx

Heap buffer over-read in HDF5 external link traversal

LOW 29

HDF5 through 2.2.0 contains a heap buffer over-read vulnerability in H5L__extern_traverse() in src/H5Lexternal.c, the default traversal callback for external links.

CVSS 4.0MEDIUM 6.9 Local No auth User interaction EPSS 0.00152 Published 2026-11-03 Partial fix · 2.3.0 CWE-125

TI-2026-84383 CVE-2026-120756 · GHSA-m9xj-6f2h-rx5r

Heap buffer over-read in HDF5 object header parsing

LOW 10

HDF5 through 2.2.0 contains a heap buffer over-read vulnerability in H5O__chunk_deserialize() in src/H5Ocache.c.

CVSS 4.0LOW 1.9 Local No auth User interaction EPSS 0.00178 Published 2026-11-03 Partial fix · 2.3.0 CWE-125

TI-2026-84382 CVE-2026-120755 · GHSA-63qm-xvf9-v4m8

Out-of-bounds read in HDF5 Szip filter on truncated chunks

LOW 21

HDF5 through 2.2.0 contains an out-of-bounds read vulnerability in H5Z__filter_szip() in src/H5Zszip.c.

CVSS 4.0MEDIUM 4.7 Local No auth User interaction EPSS 0.0014 Published 2026-11-03 Partial fix · 2.3.0 CWE-125

TI-2026-84372 CVE-2026-120754 · GHSA-j35h-4545-xh77

Uninitialized memory disclosure in HDF5 Scale-Offset filter

LOW 9

HDF5 through 2.2.0 contains an uninitialized memory read vulnerability in H5Z__filter_scaleoffset() in src/H5Zscaleoffset.c.

CVSS 4.0LOW 1.9 Local No auth User interaction EPSS 0.00145 Published 2026-11-03 Partial fix · 2.3.0 CWE-908

TI-2026-14412 CVE-2026-17574 · GHSA-cv7r-692h-j9fh

NULL Pointer Dereference in HDF5 via Invalid Variable-Length Datatype Type Tag

LOW 23

HDF5 contains a NULL pointer dereference vulnerability.

CVSS 4.0MEDIUM 5.2 Local No auth User interaction EPSS 0.00148 Published 2026-07-27 Fix deferred CWE-476

TI-2026-14411 CVE-2026-17573 · GHSA-3536-73hp-9xm7

Double Free in H5D__chunk_copy() in HDF5 via a Crafted Chunk-Index Size Field

MEDIUM 52

A double free vulnerability was discovered in the HDF5 library.

CVSS 4.0MEDIUM 4.0 Local No auth User interaction EPSS 0.00151 Published 2026-07-27 Partial fix CWE-415

TI-2026-14410 CVE-2026-17572 · GHSA-9mx5-fj64-m52r

HDF5 SOHM List Index Heap Buffer Overflow

LOW 24

Heap-based buffer overflow in the SOHM list-index deserialization code in HDF5 through 2.1.1 on all platforms allows attackers to cause a denial of service (crash) via a crafted HDF5 file whose shared-message list index…

CVSS 4.0MEDIUM 5.5 Local No auth User interaction EPSS 0.00141 Published 2026-07-27 Partial fix CWE-125

TI-2026-21190 CVE-2026-26199

Buffer underflow in `H5Iget_name `/`H5G_get_name` if size is zero

MEDIUM 60

HDF5 is a high-performance library and a file format specification that implements the HDF5 data model.

CVSS 4.0MEDIUM 5.9 Network No auth User interaction EPSS 0.00351 Published 2026-07-20 Fix deferred CWE-124

TI-2026-21188 CVE-2026-26197

Array full size, element count, and element size are not checked to make sure they match in H5Odtype.c

MEDIUM 60

HDF5 is a high-performance library and a file format specification that implements the HDF5 data model.

CVSS 4.0MEDIUM 5.9 Network No auth User interaction EPSS 0.00367 Published 2026-07-20 Partial fix · 2.0.0 CWE-125

TI-2026-23188 CVE-2026-29043

HDF5 H5T__ref_mem_setnull Heap Buffer Overflow

MEDIUM 58

HDF5 is software for managing data.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00221 Published 2026-04-10 No fix listed CWE-122

TI-2026-26978 CVE-2026-34734

HDF5: H5T__conv_struct Use After Free

HIGH 69

HDF5 is software for managing data.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.002 Published 2026-04-09 Partial fix CWE-416

TI-2026-21191 CVE-2026-26200

HDF5 Affected by H5T__conv_struct_opt Heap Buffer Overflow

LOW 36

HDF5 is software for managing data.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00419 Published 2026-02-19 Partial fix · 1.14.4-2 CWE-122

TI-2025-06431 CVE-2025-7069 · GHSA-8qx3-g6mx-gvp7

HDF5 H5FSsection.c H5FS__sect_link_size heap-based overflow

MEDIUM 55

A vulnerability, which was classified as problematic, was found in HDF5 1.14.6.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00275 Published 2025-07-04 Fix deferred CWE-119

TI-2025-06430 CVE-2025-7068 · GHSA-v8w5-gvph-x6f3

HDF5 H5FL.c H5FL__malloc memory leak

MEDIUM 55

A vulnerability, which was classified as problematic, has been found in HDF5 1.14.6.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00248 Published 2025-07-04 Fix deferred CWE-401

TI-2025-06429 CVE-2025-7067 · GHSA-rm7r-cf82-3c9w

HDF5 H5FScache.c H5FS__sinfo_serialize_node_cb heap-based overflow

MEDIUM 55

A vulnerability classified as problematic was found in HDF5 1.14.6.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00275 Published 2025-07-04 Fix deferred CWE-119

TI-2025-06231 CVE-2025-6858 · GHSA-8fpg-65fw-rjmf

HDF5 H5Centry.c H5C__flush_single_entry null pointer dereference

MEDIUM 55

A vulnerability was found in HDF5 1.14.6 and classified as problematic.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00248 Published 2025-06-29 Fix deferred CWE-404

TI-2025-06230 CVE-2025-6857 · GHSA-3475-c493-wg9p

HDF5 H5Gnode.c H5G__node_cmp3 stack-based overflow

MEDIUM 55

A vulnerability has been found in HDF5 1.14.6 and classified as problematic.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.0029 Published 2025-06-29 Fix deferred CWE-119

TI-2025-06229 CVE-2025-6856 · GHSA-wxfp-rw9f-g4g7

HDF5 H5FL.c H5FL__reg_gc_list use after free

MEDIUM 55

A vulnerability, which was classified as problematic, was found in HDF5 1.14.6.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00254 Published 2025-06-29 Fix deferred CWE-119

TI-2025-06192 CVE-2025-6818 · GHSA-mgf6-wvxv-hr92

HDF5 H5Ochunk.c H5O__chunk_protect heap-based overflow

MEDIUM 55

A vulnerability, which was classified as problematic, was found in HDF5 1.14.6.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00306 Published 2025-06-28 Fix deferred CWE-119

TI-2025-06191 CVE-2025-6817 · GHSA-wg8f-wjx8-3m3m

HDF5 H5Centry.c H5C__load_entry resource consumption

MEDIUM 55

A vulnerability, which was classified as problematic, has been found in HDF5 1.14.6.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00233 Published 2025-06-28 Fix deferred CWE-400

TI-2025-06190 CVE-2025-6816 · GHSA-x887-jv9q-xhvq

HDF5 H5Ofsinfo.c H5O__fsinfo_encode heap-based overflow

MEDIUM 55

A vulnerability classified as problematic was found in HDF5 1.14.6.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00259 Published 2025-06-28 Fix deferred CWE-119

TI-2025-06131 CVE-2025-6750 · GHSA-vvrm-jv2m-hrg6

HDF5 H5Omtime.c H5O__mtime_new_encode heap-based overflow

MEDIUM 55

A vulnerability, which was classified as problematic, has been found in HDF5 1.14.6.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00252 Published 2025-06-27 Fix deferred CWE-119

TI-2025-05916 CVE-2025-6516 · GHSA-r9x6-p32f-jfm3

HDF5 H5Fint.c H5F_addr_decode_len heap-based overflow

MEDIUM 55

A vulnerability has been found in HDF5 up to 1.14.6 and classified as critical.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00385 Published 2025-06-23 Partial fix CWE-119

TI-2025-05672 CVE-2025-6270 · GHSA-5pmf-w3jq-5hrj

HDF5 H5FSsection.c H5FS__sect_find_node heap-based overflow

MEDIUM 55

A vulnerability, which was classified as critical, has been found in HDF5 up to 1.14.6.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00262 Published 2025-06-19 Fix deferred CWE-119

Vulnerabilities

Filters