HDF5 H5FL.c H5FL__malloc memory leak

...

CVE-2025-6856

The CVE-2025-6856 issue affects HDF5 1.14.6, specifically the function H5FL__reg_gc_list in src/H5FL.c, where manipulation leads to a use-after-free vulnerability. OSV reports confirm local attack requirements and publicly disclosed exploitation. The available connected sources do not specify a f...

CVE-2024-32622

CVE-2024-32622 affects HDF5 Library up to version 1.14.3 and involves an out-of-bounds read in H5FL_arr_malloc (invoked from H5S_set_extent_simple in H5S.c via H5FL.c). Public technical detail from Tencent/TSSA advisory confirms the vulnerability and notes that a fix was issued in HDF5 1.14.4. Im...

UBUNTU-CVE-2018-13871

An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer overflow in the function H5FLblkmalloc in H5FL.c...