HD
Product
hdf5
136
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 19High 56Medium 56Low 5
Watch
Add hdf5 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-32608 | 9.8 | Oct 9 | HDF5 library through 1.14.3 has memory corruption in H5A__close resulting in the corruption of the instruction pointer and causing denial of service or potential code execution Affected: before 1.14.4 |
| CVE-2024-33874 | 9.8 | May 14 | HDF5 Library through 1.14.3 has a heap buffer overflow in H5O__mtime_new_encode in H5Omtime.c Affected: before 1.14.4 |
| CVE-2024-32621 | 9.8 | May 14 | HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5HG_read in H5HG.c (called from H5VL__native_blob_get in H5VLnative_blob.c), resulting in the corruption of… Affected: before 1.14.4 |
| CVE-2024-32615 | 9.8 | May 14 | HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5Z__nbit_decompress_one_byte in H5Znbit.c, caused by the earlier use of an initialized pointer Affected: before 1.14.4 |
| CVE-2024-32611 | 9.8 | May 14 | HDF5 Library through 1.14.3 may use an uninitialized value in H5A__attr_release_table in H5Aint.c Affected: before 1.14.4 |
| CVE-2024-29164 | 9.8 | May 14 | HDF5 through 1.14.3 contains a stack buffer overflow in H5R__decode_heap, resulting in the corruption of the instruction pointer and causing denial of service or potential code… Affected: before 1.14.4 |
| CVE-2024-29159 | 9.8 | May 14 | HDF5 through 1.14.3 contains a buffer overflow in H5Z__filter_scaleoffset, resulting in the corruption of the instruction pointer and causing denial of service or potential code… Affected: before 1.14.4 |
| CVE-2024-29157 | 9.8 | May 14 | HDF5 through 1.14.3 contains a heap buffer overflow in H5HG_read, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution Affected: through 1.14.3 |
| CVE-2018-13876 | 9.8 | Jul 10 | An issue was discovered in the HDF HDF5 1.8.20 library Affected: 1.8.20 |
| CVE-2018-13874 | 9.8 | Jul 10 | An issue was discovered in the HDF HDF5 1.8.20 library Affected: 1.8.20 |
| CVE-2018-13873 | 9.8 | Jul 10 | An issue was discovered in the HDF HDF5 1.8.20 library Affected: 1.8.0 through 1.8.20 |
| CVE-2018-13872 | 9.8 | Jul 10 | An issue was discovered in the HDF HDF5 1.8.20 library Affected: 1.8.20 |
| CVE-2018-13871 | 9.8 | Jul 10 | An issue was discovered in the HDF HDF5 1.8.20 library Affected: 1.8.20 |
| CVE-2018-13870 | 9.8 | Jul 10 | An issue was discovered in the HDF HDF5 1.8.20 library Affected: 1.8.20 |
| CVE-2018-13869 | 9.8 | Jul 10 | An issue was discovered in the HDF HDF5 1.8.20 library Affected: 1.8.20 |
| CVE-2018-13868 | 9.8 | Jul 10 | An issue was discovered in the HDF HDF5 1.8.20 library Affected: 1.8.20 |
| CVE-2018-13867 | 9.8 | Jul 10 | An issue was discovered in the HDF HDF5 1.8.20 library Affected: 1.8.20 |
| CVE-2018-13866 | 9.8 | Jul 10 | An issue was discovered in the HDF HDF5 1.8.20 library Affected: 1.8.20 |
| CVE-2024-32622 | 9.1 | May 14 | HDF5 Library through 1.14.3 contains a out-of-bounds read operation in H5FL_arr_malloc in H5FL.c (called from H5S_set_extent_simple in H5S.c) Affected: before 1.14.4 |
| CVE-2025-44905 | 8.8 | May 30 | hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5Z__filter_scaleoffset function Affected: 1.14.6 |
| CVE-2025-44904 | 8.8 | May 30 | hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5VM_memcpyvv function Affected: 1.14.6 |
| CVE-2024-33877 | 8.8 | May 14 | HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5T__conv_struct_opt in H5Tconv.c Affected: before 1.14.4 |
| CVE-2024-33873 | 8.8 | May 14 | HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5D__scatter_mem in H5Dscatgath.c Affected: before 1.14.4 |
| CVE-2024-32623 | 8.8 | May 14 | HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5VM_array_fill in H5VM.c (called from H5S_select_elements in H5Spoint.c) Affected: before 1.14.4 |
| CVE-2024-32617 | 8.8 | May 14 | HDF5 Library through 1.14.3 contains a heap-based buffer over-read caused by the unsafe use of strdup in H5MM_xstrdup in H5MM.c (called from H5G__ent_to_link in H5Glink.c) Affected: before 1.14.4 |
| CVE-2024-32614 | 8.8 | May 14 | HDF5 Library through 1.14.3 has a SEGV in H5VM_memcpyvv in H5VM.c Affected: before 1.14.4 |
| CVE-2024-32605 | 8.8 | May 14 | HDF5 Library through 1.14.3 has a heap-based buffer over-read in H5VM_memcpyvv in H5VM.c (called from H5D__compact_readvv in H5Dcompact.c) Affected: before 1.14.4 |
| CVE-2024-29161 | 8.8 | May 14 | HDF5 through 1.14.3 contains a heap buffer overflow in H5A__attr_release_table, resulting in the corruption of the instruction pointer and causing denial of service or potential… Affected: before 1.14.4 |
| CVE-2020-18494 | 8.8 | Aug 22 | Buffer Overflow vulnerability in function H5S_close in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file Affected: 1.10.4 |
| CVE-2020-18232 | 8.8 | Aug 22 | Buffer Overflow vulnerability in function H5S_close in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file Affected: 1.10.4 |
| CVE-2021-46242 | 8.8 | Jan 21 | HDF5 v1.13.1-1 was discovered to contain a heap-use-after free via the component H5AC_unpin_entry Affected: 1.13.1-1 |
| CVE-2019-9152 | 8.8 | Feb 25 | An issue was discovered in the HDF HDF5 1.10.4 library Affected: 1.10.4 |
| CVE-2019-9151 | 8.8 | Feb 25 | An issue was discovered in the HDF HDF5 1.10.4 library Affected: 1.10.4 |
| CVE-2018-16438 | 8.8 | Sep 4 | An issue was discovered in the HDF HDF5 1.8.20 library Affected: 1.8.20 |
| CVE-2018-14460 | 8.8 | Jul 20 | An issue was discovered in the HDF HDF5 1.8.20 library Affected: 1.8.20 |
| CVE-2018-14035 | 8.8 | Jul 13 | An issue was discovered in the HDF HDF5 1.8.20 library Affected: 1.8.20 |
| CVE-2018-14034 | 8.8 | Jul 13 | An issue was discovered in the HDF HDF5 1.8.20 library Affected: 1.8.20 |
| CVE-2018-14033 | 8.8 | Jul 13 | An issue was discovered in the HDF HDF5 1.8.20 library Affected: 1.8.20 |
| CVE-2018-14031 | 8.8 | Jul 13 | An issue was discovered in the HDF HDF5 1.8.20 library Affected: 1.8.20 |
| CVE-2017-17509 | 8.8 | Dec 11 | In HDF5 1.10.1, there is an out of bounds write vulnerability in the function H5G__ent_decode_vec in H5Gcache.c in libhdf5.a Affected: 1.10.1 |
| CVE-2016-4333 | 8.6 | Nov 18 | The HDF5 1.8.16 library allocating space for the array using a value from the file has an impact within the loop for initializing said array allowing a value within the file to… Affected: 1.8.16 |
| CVE-2016-4332 | 8.6 | Nov 18 | The library's failure to check if certain message types support a particular flag, the HDF5 1.8.16 library will cast the structure to an alternative structure and then assign to… Affected: 1.8.16 |
| CVE-2016-4331 | 8.6 | Nov 18 | When decoding data out of a dataset encoded with the H5Z_NBIT decoding, the HDF5 1.8.16 library will fail to ensure that the precision is within the bounds of the size leading to… Affected: 1.8.16 |
| CVE-2016-4330 | 8.6 | Nov 18 | In the HDF5 1.8.16 library's failure to check if the number of dimensions for an array read from the file is within the bounds of the space allocated for it, a heap-based buffer… Affected: 1.8.16 |
| CVE-2025-2153 | 8.1 | Mar 10 | A vulnerability, which was classified as critical, was found in HDF5 1.14.6 Affected: 1.14.6 |
| CVE-2018-11206 | 8.1 | May 16 | An out of bounds read was discovered in H5O_fill_new_decode and H5O_fill_old_decode in H5Ofill.c in the HDF HDF5 1.10.2 library Affected: 1.10.2 |
| CVE-2018-11205 | 8.1 | May 16 | A out of bounds read was discovered in H5VM_memcpyvv in H5VM.c in the HDF HDF5 1.10.2 library Affected: 1.10.2 |
| CVE-2026-34734 | 7.8 | Apr 9 | HDF5: H5T__conv_struct Use After Free Affected: <= 1.14.1-2 |
| CVE-2026-26200 | 7.8 | Feb 19 | HDF5 Affected by H5T__conv_struct_opt Heap Buffer Overflow Affected: < 1.14.4-2 |
| CVE-2025-6857 | 7.8 | Jun 29 | A vulnerability has been found in HDF5 1.14.6 and classified as problematic Affected: 1.14.6 |
