JLSEC-2026-350

A vulnerability, which was classified as problematic, has been found in HDF5 1.14.6. This issue affects the function H5FLmalloc of the file src/H5FL.c. The manipulation leads to memory leak. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used...

PT-2026-39339

HDF5 through 1.14.3 contains a stack buffer overflow in H5FL arr malloc, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution...

PT-2026-39396

A vulnerability, which was classified as problematic, has been found in HDF5 1.14.6. This issue affects the function H5FL malloc of the file src/H5FL.c. The manipulation leads to memory leak. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used...

PT-2026-39392

A vulnerability, which was classified as problematic, was found in HDF5 1.14.6. Affected is the function H5FL reg gc list of the file src/H5FL.c. The manipulation leads to use after free. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used...

Linux Distros Unpatched Vulnerability : CVE-2025-7068

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability, which was classified as problematic, has been found in HDF5 1.14.6. This issue affects the function H5FLmalloc of the file src/H5FL.c. The...

AZL-65205 CVE-2025-7068 affecting package hdf5 for versions less than 1.14.6-1

A vulnerability, which was classified as problematic, has been found in HDF5 1.14.6. This issue affects the function H5FLmalloc of the file src/H5FL.c. The manipulation leads to memory leak. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used...

CVE-2025-7068 HDF5 H5FL.c H5FL__malloc memory leak

A vulnerability, which was classified as problematic, has been found in HDF5 1.14.6. This issue affects the function H5FLmalloc of the file src/H5FL.c. The manipulation leads to memory leak. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used...

hdf5: multiple CVEs

HDF5 Library through 1.14.3 contains a out-of-bounds read operation in H5FLarrmalloc in H5FL.c called from H5Ssetextentsimple in H5S.c...

SUSE CVE-2025-2913

A vulnerability was found in HDF5 up to 1.14.6. It has been rated as critical. Affected by this issue is the function H5FLblkgclist of the file src/H5FL.c. The manipulation of the argument H5FLblkheadt leads to use after free. An attack has to be approached locally. The exploit has been disclosed...

CVE-2025-2913

CVE-2025-2913 affects HDF5 1.14.6 and earlier, via H5FL__blk_gc_list in H5FL.c. The root cause is manipulation of H5FL_blk_head_t, which leads to a use-after-free condition. Local attacker access is required. Public exploit information exists. OSV entries describe the issue as a local-use-after-f...

AZL-40543 CVE-2024-32622 affecting package hdf5 for versions less than 1.14.4.3-1

HDF5 Library through 1.14.3 contains a out-of-bounds read operation in H5FLarrmalloc in H5FL.c called from H5Ssetextentsimple in H5S.c...

DEBIAN-CVE-2024-32622

HDF5 Library through 1.14.3 contains a out-of-bounds read operation in H5FLarrmalloc in H5FL.c called from H5Ssetextentsimple in H5S.c...

HDF5 Library through 1.14.3 contains a out-of-bounds read operation in H5FL_arr_malloc in H5FL.c (called from H5S_set_extent_simple in H5S.c).

...

hdf5:h5_extended_fuzzer: Use-of-uninitialized-value in H5FL__blk_gc_list

Project: https://github.com/HDFGroup/hdf5.git Detailed Report: https://oss-fuzz.com/testcase?key=5486819903864832 Project: hdf5 Fuzzing Engine: libFuzzer Fuzz Target: h5extendedfuzzer Job Type: libfuzzermsanhdf5 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

hdf5:h5_extended_fuzzer: Crash in H5FL__blk_gc_list

Project: https://github.com/HDFGroup/hdf5.git Detailed Report: https://oss-fuzz.com/testcase?key=6006845194764288 Project: hdf5 Fuzzing Engine: libFuzzer Fuzz Target: h5extendedfuzzer Job Type: libfuzzerubsanhdf5 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x353535323352 Crash Stat...