What’s Vulnerable › Products
HDF5 vulnerabilities
145 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 44 published in the last 12 months.
Check whether your HDF5 version is affected
Latest HDF5 vulnerabilities
- CVE-2026-19029 — HDF5 scale-offset filter heap buffer over-read via crafted chunk (CVSS 6.8)
- CVE-2026-106547 — HDF5 heap buffer overflow in H5VM_array_fill via crafted fill-value metadata (CVSS 8.5)
- CVE-2026-92627 — Heap Use-After-Free in H5T__conv_f_f (CVSS 4.6)
- CVE-2026-19028 — HDF5 integer underflow in Fletcher32 filter leads to massive out-of-bounds read (CVSS 6.8)
- CVE-2026-19027 — HDF5 out-of-bounds heap read in N-Bit filter decompression (CVSS 6.9)
- CVE-2026-19026 — Nbit filter NULL/short parameter-array dereference (CVSS 6.8)
- CVE-2026-19025 — HDF5 divide-by-zero (SIGFPE) via mismatched chunk-layout dimensionality and dataspace rank on dataset open (CVSS 6.8)
- CVE-2026-19024 — HDF5 H5Pget_fill_value NULL Pointer Dereference via Malformed Fill Value Message (CVSS 8.2)
- CVE-2026-19023 — HDF5 h5dump Untrusted Pointer Dereference in Binary Output of Variable-Length String Datasets (CVSS 6.8)
- CVE-2026-17574 — NULL Pointer Dereference in HDF5 via Invalid Variable-Length Datatype Type Tag (CVSS 5.5)
- CVE-2026-17573 — Double Free in H5D__chunk_copy() in HDF5 via a Crafted Chunk-Index Size Field (CVSS 5.5)
- CVE-2026-17572 — HDF5 SOHM List Index Heap Buffer Overflow (CVSS 5.5)
- CVE-2026-26199 — Buffer underflow in `H5Iget_name `/`H5G_get_name` if size is zero (CVSS 6.5)
- CVE-2026-26197 — Array full size, element count, and element size are not checked to make sure they match in H5Odtype.c (CVSS 7.5)
- CVE-2026-29043 — HDF5 H5T__ref_mem_setnull Heap Buffer Overflow (CVSS 5.5)
- CVE-2026-34734 — HDF5: H5T__conv_struct Use After Free (CVSS 7.8)
- CVE-2026-26200 — HDF5 Affected by H5T__conv_struct_opt Heap Buffer Overflow (CVSS 7.8)
- CVE-2025-7069 — HDF5 H5FSsection.c H5FS__sect_link_size heap-based overflow (CVSS 5.5)
- CVE-2025-7068 — HDF5 H5FL.c H5FL__malloc memory leak (CVSS 5.5)
- CVE-2025-7067 — HDF5 H5FScache.c H5FS__sinfo_serialize_node_cb heap-based overflow (CVSS 5.5)
- CVE-2025-6858 — HDF5 H5Centry.c H5C__flush_single_entry null pointer dereference (CVSS 5.5)
- CVE-2025-6857 — HDF5 H5Gnode.c H5G__node_cmp3 stack-based overflow (CVSS 7.8)
- CVE-2025-6856 — HDF5 H5FL.c H5FL__reg_gc_list use after free (CVSS 7.8)
- CVE-2025-6818 — HDF5 H5Ochunk.c H5O__chunk_protect heap-based overflow (CVSS 7.8)
- CVE-2025-6817 — HDF5 H5Centry.c H5C__load_entry resource consumption (CVSS 3.3)