TH
Vendor
The HDF Group
12
CVEs
0
On KEV
2
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-106547 | HD HDF5 The HDF Group | 8.5 | Oct 6 | HDF5 heap buffer overflow in H5VM_array_fill via crafted fill-value metadata |
| CVE-2026-19029 | HD HDF5 The HDF Group | 6.8 | Oct 6 | HDF5 scale-offset filter heap buffer over-read via crafted chunk |
| CVE-2026-92627 | HD HDF5 The HDF Group | 4.6 | Sep 16 | Heap Use-After-Free in H5T__conv_f_f |
| CVE-2026-19028 | HD HDF5 The HDF Group | 6.8 | Aug 5 | HDF5 integer underflow in Fletcher32 filter leads to massive out-of-bounds read |
| CVE-2026-19027 | HD HDF5 The HDF Group | 6.9 | Aug 5 | HDF5 out-of-bounds heap read in N-Bit filter decompression |
| CVE-2026-19026 | HD HDF5 The HDF Group | 6.8 | Aug 5 | Nbit filter NULL/short parameter-array dereference |
| CVE-2026-19025 | HD HDF5 The HDF Group | 6.8 | Aug 5 | HDF5 divide-by-zero (SIGFPE) via mismatched chunk-layout dimensionality and dataspace rank on dataset open |
| CVE-2026-19024 | HD HDF5 The HDF Group | 8.2 | Aug 5 | HDF5 H5Pget_fill_value NULL Pointer Dereference via Malformed Fill Value Message |
| CVE-2026-19023 | HD HDF5 The HDF Group | 6.8 | Aug 5 | HDF5 h5dump Untrusted Pointer Dereference in Binary Output of Variable-Length String Datasets |
| CVE-2026-17574 | HD HDF5 The HDF Group | 5.5 | Jul 27 | NULL Pointer Dereference in HDF5 via Invalid Variable-Length Datatype Type Tag |
| CVE-2026-17573 | HD HDF5 The HDF Group | 5.5 | Jul 27 | Double Free in H5D__chunk_copy() in HDF5 via a Crafted Chunk-Index Size Field |
| CVE-2026-17572 | HD HDF5 The HDF Group | 5.5 | Jul 27 | HDF5 SOHM List Index Heap Buffer Overflow |