PT-2026-93831

Name of the Vulnerable Software and Affected Versions HDF5 versions prior to 1.14.2 Description A heap-use-after-free issue exists in the H5T conv f f function within src/H5Tconv.c. This occurs during the conversion of a compound datatype containing floating-point members during a dataset read,...

PT-2026-121496

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=560740865 Crash type: Heap-buffer-overflow READ 1 Crash state: H5T bit find H5T conv f i loop H5T conv f i...

PT-2026-39400

HDF5 is software for managing data. In 1.14.1-2 and earlier, a heap-use-after-free was found in the h5dump helper utility. An attacker who can supply a malicious h5 file can trigger a heap use-after-free. The freed object is referenced in a memmove call from H5T conv struct. The original object w...

PT-2026-39370

HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5T conv struct opt in H5Tconv.c...

PT-2026-39373

A vulnerability has been found in HDF5 1.14.6 and classified as critical. This vulnerability affects the function H5T bit copy of the component Type Conversion Logic. The manipulation leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been...

PT-2026-39399

HDF5 is software for managing data. In 1.14.1-2 and earlier, an attacker who can control an h5 file parsed by HDF5 can trigger a write-based heap buffer overflow condition in the H5T ref mem setnull method. This can lead to a denial-of-service condition, and potentially further issues such as...

PT-2026-39344

HDF5 through 1.14.3 contains a heap buffer overflow in H5T bit find, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution...

PT-2026-39365

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5T ref mem setnull in H5Tref.c called from H5T conv ref in H5Tconv.c, resulting in the corruption of the instruction pointer...

PT-2026-39359

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5T get native type in H5Tnative.c, resulting in the corruption of the instruction pointer...

CVE-2026-34734 HDF5: H5T__conv_struct Use After Free

HDF5 is software for managing data. In 1.14.1-2 and earlier, a heap-use-after-free was found in the h5dump helper utility. An attacker who can supply a malicious h5 file can trigger a heap use-after-free. The freed object is referenced in a memmove call from H5Tconvstruct. The original object was...

Linux Distros Unpatched Vulnerability : CVE-2019-8397

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5Tclosereal in H5T.c. CVE-2019-8397 Note that Nessus...

HDF5 security vulnerabilities

HDF5 is a library of HDF open source . HDF5 has a buffer overflow vulnerability , the vulnerability stems from the H5Tbitcopy function fails to correctly validate the length of the input data size , an attacker can use this vulnerability to cause a denial of service...

HDF5 Heap Buffer Overflow DoS

The vulnerability of the H5Tclosereal function in the H5T.c file of the HDF5 library is related to the execution of the operation beyond the buffer boundaries in memory, which leads to corruption of the instruction pointers. Exploiting this vulnerability could allow an attacker to cause a service...

AZL-40562 CVE-2024-32610 affecting package hdf5 for versions less than 1.14.4.3-1

HDF5 Library through 1.14.3 has a SEGV in H5Tclosereal in H5T.c, resulting in a corrupted instruction pointer...

UBUNTU-CVE-2024-32619

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5Tcopyreopen in H5T.c, resulting in the corruption of the instruction pointer...

UBUNTU-CVE-2024-32610

HDF5 Library through 1.14.3 has a SEGV in H5Tclosereal in H5T.c, resulting in a corrupted instruction pointer...

HDF Group HDF5 security vulnerabilities

HDF Group HDF5 is a suite of tools for managing and storing different types of data from the American company HDF Group. The product supports managing, manipulating, viewing and analyzing data and generating files in portable formats. A security vulnerability exists in HDF5 Library version 1.14.3...

PT-2024-6193

Name of the Vulnerable Software and Affected Versions HDF5 Library versions prior to 1.14.4 Description The issue is related to a heap-based buffer overflow in the H5T ref mem setnull function in the H5Tref.c file of the HDF5 Library, which can lead to the corruption of the instruction pointer...

PT-2024-6188

Name of the Vulnerable Software and Affected Versions HDF5 Library versions prior to 1.14.4 Description The issue is related to a heap-based buffer overflow in the H5T conv struct opt function in the H5Tconv.c file of the HDF5 Library. This could potentially allow a remote attacker to impact the...

PT-2024-6199

Name of the Vulnerable Software and Affected Versions HDF5 Library versions prior to 1.14.4 Description The issue is related to a heap-based buffer overflow in the H5T get native type function in the H5Tnative.c file of the HDF5 Library. This overflow can result in the corruption of the instructi...