Hdfgroup Hdf5
33 CVEs affecting Hdfgroup Hdf5. Latest disclosed: 2026-04-10. Critical: 0, High: 7.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-17509 | High | 8.8 | 2017-12-11 | In HDF5 1.10.1, there is an out of bounds write vulnerability in the function H5G__ent_decode_vec in H5Gcache.c in libhdf5.a. For example, h5dump would crash o… |
CVE-2016-4333 | High | 8.6 | 2016-11-18 | The HDF5 1.8.16 library allocating space for the array using a value from the file has an impact within the loop for initializing said array allowing a value w… |
CVE-2016-4332 | High | 8.6 | 2016-11-18 | The library's failure to check if certain message types support a particular flag, the HDF5 1.8.16 library will cast the structure to an alternative structure… |
CVE-2016-4331 | High | 8.6 | 2016-11-18 | When decoding data out of a dataset encoded with the H5Z_NBIT decoding, the HDF5 1.8.16 library will fail to ensure that the precision is within the bounds of… |
CVE-2016-4330 | High | 8.6 | 2016-11-18 | In the HDF5 1.8.16 library's failure to check if the number of dimensions for an array read from the file is within the bounds of the space allocated for it, a… |
CVE-2026-34734 | High | 7.8 | 2026-04-09 | HDF5 is software for managing data. In 1.14.1-2 and earlier, a heap-use-after-free was found in the h5dump helper utility. An attacker who can supply a malicio… |
CVE-2026-26200 | High | 7.8 | 2026-02-19 | HDF5 is software for managing data. Prior to version 1.14.4-2, an attacker who can control an `h5` file parsed by HDF5 can trigger a write-based heap buffer ov… |
CVE-2017-17508 | Medium | 6.5 | 2017-12-11 | In HDF5 1.10.1, there is a divide-by-zero vulnerability in the function H5T_set_loc in the H5T.c file in libhdf5.a. For example, h5dump would crash when someon… |
CVE-2017-17507 | Medium | 6.5 | 2017-12-11 | In HDF5 1.10.1, there is an out of bounds read vulnerability in the function H5T_conv_struct_opt in H5Tconv.c in libhdf5.a. For example, h5dump would crash whe… |
CVE-2017-17506 | Medium | 6.5 | 2017-12-11 | In HDF5 1.10.1, there is an out of bounds read vulnerability in the function H5Opline_pline_decode in H5Opline.c in libhdf5.a. For example, h5dump would crash… |
CVE-2017-17505 | Medium | 6.5 | 2017-12-11 | In HDF5 1.10.1, there is a NULL pointer dereference in the function H5O_pline_decode in the H5Opline.c file in libhdf5.a. For example, h5dump would crash when… |
CVE-2026-29043 | Medium | 5.5 | 2026-04-10 | HDF5 is software for managing data. In 1.14.1-2 and earlier, an attacker who can control an h5 file parsed by HDF5 can trigger a write-based heap buffer overfl… |
CVE-2025-6516 | Medium | 5.3 | 2025-06-23 | A vulnerability has been found in HDF5 up to 1.14.6 and classified as critical. This vulnerability affects the function H5F_addr_decode_len of the file /hdf5/s… |
CVE-2025-6270 | Medium | 5.3 | 2025-06-19 | A vulnerability, which was classified as critical, has been found in HDF5 up to 1.14.6. Affected by this issue is the function H5FS__sect_find_node of the file… |
CVE-2025-6269 | Medium | 5.3 | 2025-06-19 | A vulnerability classified as critical was found in HDF5 up to 1.14.6. Affected by this vulnerability is the function H5C__reconstruct_cache_entry of the file… |
CVE-2025-7069 | Low | 3.3 | 2025-07-04 | A vulnerability, which was classified as problematic, was found in HDF5 1.14.6. Affected is the function H5FS__sect_link_size of the file src/H5FSsection.c. Th… |
CVE-2025-7068 | Low | 3.3 | 2025-07-04 | A vulnerability, which was classified as problematic, has been found in HDF5 1.14.6. This issue affects the function H5FL__malloc of the file src/H5FL.c. The m… |
CVE-2025-7067 | Low | 3.3 | 2025-07-04 | A vulnerability classified as problematic was found in HDF5 1.14.6. This vulnerability affects the function H5FS__sinfo_serialize_node_cb of the file src/H5FSc… |
CVE-2025-6858 | Low | 3.3 | 2025-06-29 | A vulnerability was found in HDF5 1.14.6 and classified as problematic. Affected by this issue is the function H5C__flush_single_entry of the file src/H5Centry… |
CVE-2025-6857 | Low | 3.3 | 2025-06-29 | A vulnerability has been found in HDF5 1.14.6 and classified as problematic. Affected by this vulnerability is the function H5G__node_cmp3 of the file src/H5Gn… |