HD
Product
hdf5
136
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 19High 56Medium 56Low 5
Watch
Add hdf5 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-44905 | 8.8 | May 30 | hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5Z__filter_scaleoffset function Affected: 1.14.6 |
| CVE-2025-44904 | 8.8 | May 30 | hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5VM_memcpyvv function Affected: 1.14.6 |
| CVE-2024-33877 | 8.8 | May 14 | HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5T__conv_struct_opt in H5Tconv.c Affected: before 1.14.4 |
| CVE-2024-33873 | 8.8 | May 14 | HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5D__scatter_mem in H5Dscatgath.c Affected: before 1.14.4 |
| CVE-2024-32623 | 8.8 | May 14 | HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5VM_array_fill in H5VM.c (called from H5S_select_elements in H5Spoint.c) Affected: before 1.14.4 |
| CVE-2024-32617 | 8.8 | May 14 | HDF5 Library through 1.14.3 contains a heap-based buffer over-read caused by the unsafe use of strdup in H5MM_xstrdup in H5MM.c (called from H5G__ent_to_link in H5Glink.c) Affected: before 1.14.4 |
| CVE-2024-32614 | 8.8 | May 14 | HDF5 Library through 1.14.3 has a SEGV in H5VM_memcpyvv in H5VM.c Affected: before 1.14.4 |
| CVE-2024-32605 | 8.8 | May 14 | HDF5 Library through 1.14.3 has a heap-based buffer over-read in H5VM_memcpyvv in H5VM.c (called from H5D__compact_readvv in H5Dcompact.c) Affected: before 1.14.4 |
| CVE-2024-29161 | 8.8 | May 14 | HDF5 through 1.14.3 contains a heap buffer overflow in H5A__attr_release_table, resulting in the corruption of the instruction pointer and causing denial of service or potential… Affected: before 1.14.4 |
| CVE-2020-18494 | 8.8 | Aug 22 | Buffer Overflow vulnerability in function H5S_close in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file Affected: 1.10.4 |
| CVE-2020-18232 | 8.8 | Aug 22 | Buffer Overflow vulnerability in function H5S_close in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file Affected: 1.10.4 |
| CVE-2021-46242 | 8.8 | Jan 21 | HDF5 v1.13.1-1 was discovered to contain a heap-use-after free via the component H5AC_unpin_entry Affected: 1.13.1-1 |
| CVE-2019-9152 | 8.8 | Feb 25 | An issue was discovered in the HDF HDF5 1.10.4 library Affected: 1.10.4 |
| CVE-2019-9151 | 8.8 | Feb 25 | An issue was discovered in the HDF HDF5 1.10.4 library Affected: 1.10.4 |
| CVE-2018-16438 | 8.8 | Sep 4 | An issue was discovered in the HDF HDF5 1.8.20 library Affected: 1.8.20 |
| CVE-2018-14460 | 8.8 | Jul 20 | An issue was discovered in the HDF HDF5 1.8.20 library Affected: 1.8.20 |
| CVE-2018-14035 | 8.8 | Jul 13 | An issue was discovered in the HDF HDF5 1.8.20 library Affected: 1.8.20 |
| CVE-2018-14034 | 8.8 | Jul 13 | An issue was discovered in the HDF HDF5 1.8.20 library Affected: 1.8.20 |
| CVE-2018-14033 | 8.8 | Jul 13 | An issue was discovered in the HDF HDF5 1.8.20 library Affected: 1.8.20 |
| CVE-2018-14031 | 8.8 | Jul 13 | An issue was discovered in the HDF HDF5 1.8.20 library Affected: 1.8.20 |
| CVE-2017-17509 | 8.8 | Dec 11 | In HDF5 1.10.1, there is an out of bounds write vulnerability in the function H5G__ent_decode_vec in H5Gcache.c in libhdf5.a Affected: 1.10.1 |
| CVE-2016-4333 | 8.6 | Nov 18 | The HDF5 1.8.16 library allocating space for the array using a value from the file has an impact within the loop for initializing said array allowing a value within the file to… Affected: 1.8.16 |
| CVE-2016-4332 | 8.6 | Nov 18 | The library's failure to check if certain message types support a particular flag, the HDF5 1.8.16 library will cast the structure to an alternative structure and then assign to… Affected: 1.8.16 |
| CVE-2016-4331 | 8.6 | Nov 18 | When decoding data out of a dataset encoded with the H5Z_NBIT decoding, the HDF5 1.8.16 library will fail to ensure that the precision is within the bounds of the size leading to… Affected: 1.8.16 |
| CVE-2016-4330 | 8.6 | Nov 18 | In the HDF5 1.8.16 library's failure to check if the number of dimensions for an array read from the file is within the bounds of the space allocated for it, a heap-based buffer… Affected: 1.8.16 |
| CVE-2025-2153 | 8.1 | Mar 10 | A vulnerability, which was classified as critical, was found in HDF5 1.14.6 Affected: 1.14.6 |
| CVE-2018-11206 | 8.1 | May 16 | An out of bounds read was discovered in H5O_fill_new_decode and H5O_fill_old_decode in H5Ofill.c in the HDF HDF5 1.10.2 library Affected: 1.10.2 |
| CVE-2018-11205 | 8.1 | May 16 | A out of bounds read was discovered in H5VM_memcpyvv in H5VM.c in the HDF HDF5 1.10.2 library Affected: 1.10.2 |
| CVE-2026-34734 | 7.8 | Apr 9 | HDF5: H5T__conv_struct Use After Free Affected: <= 1.14.1-2 |
| CVE-2026-26200 | 7.8 | Feb 19 | HDF5 Affected by H5T__conv_struct_opt Heap Buffer Overflow Affected: < 1.14.4-2 |
| CVE-2025-6857 | 7.8 | Jun 29 | HDF5 H5Gnode.c H5G__node_cmp3 stack-based overflow Affected: 1.14.6 |
| CVE-2025-6856 | 7.8 | Jun 29 | HDF5 H5FL.c H5FL__reg_gc_list use after free Affected: 1.14.6 |
| CVE-2025-6818 | 7.8 | Jun 28 | HDF5 H5Ochunk.c H5O__chunk_protect heap-based overflow Affected: 1.14.6 |
| CVE-2025-6516 | 7.8 | Jun 23 | HDF5 H5Fint.c H5F_addr_decode_len heap-based overflow Affected: through 1.14.6 |
| CVE-2025-2310 | 7.8 | Mar 14 | A vulnerability was found in HDF5 1.14.6 and classified as critical Affected: 1.14.6 |
| CVE-2025-2309 | 7.8 | Mar 14 | A vulnerability has been found in HDF5 1.14.6 and classified as critical Affected: 1.14.6 |
| CVE-2025-2308 | 7.8 | Mar 14 | A vulnerability, which was classified as critical, was found in HDF5 1.14.6 Affected: 1.14.6 |
| CVE-2022-26061 | 7.8 | Aug 22 | A heap-based buffer overflow vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4 Affected: 1.10.4 |
| CVE-2022-25972 | 7.8 | Aug 22 | An out-of-bounds write vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4 Affected: 1.10.4 |
| CVE-2022-25942 | 7.8 | Aug 22 | An out-of-bounds read vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4 Affected: 1.10.4 |
| CVE-2018-13875 | 7.8 | Jul 10 | An issue was discovered in the HDF HDF5 1.8.20 library Affected: 1.8.20 |
| CVE-2026-26197 | 7.5 | Jul 20 | Array full size, element count, and element size are not checked to make sure they match in H5Odtype.c Affected: < 2.0.0 |
| CVE-2024-32609 | 7.5 | May 14 | HDF5 Library through 1.14.3 allows stack consumption in the function H5E_printf_stack in H5Eint.c Affected: before 1.14.4 |
| CVE-2021-37501 | 7.5 | Feb 3 | Buffer Overflow vulnerability in HDFGroup hdf5-h5dump 1.12.0 through 1.13.0 allows attackers to cause a denial of service via h5tools_str_sprint in /hdf5/tools/lib/h5tools_str.c Affected: 1.12.0 through 1.13.0 |
| CVE-2024-32624 | 7.4 | May 14 | HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5T__ref_mem_setnull in H5Tref.c (called from H5T__conv_ref in H5Tconv.c), resulting in the corruption of the… Affected: before 1.14.4 |
| CVE-2024-32620 | 7.4 | May 14 | HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5F_addr_decode_len in H5Fint.c, resulting in the corruption of the instruction pointer Affected: before 1.14.4 |
| CVE-2024-32619 | 7.4 | May 14 | HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5T_copy_reopen in H5T.c, resulting in the corruption of the instruction pointer Affected: before 1.14.4 |
| CVE-2024-32618 | 7.4 | May 14 | HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5T__get_native_type in H5Tnative.c, resulting in the corruption of the instruction pointer Affected: before 1.14.4 |
| CVE-2024-32616 | 7.4 | May 14 | HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5O__dtype_encode_helper in H5Odtype.c Affected: before 1.14.4 |
| CVE-2024-32613 | 7.4 | May 14 | HDF5 Library through 1.14.3 contains a heap-based buffer over-read in the function H5HL__fl_deserialize in H5HLcache.c, a different vulnerability than CVE-2024-32612 Affected: before 1.14.4 |
