PT-2026-107249

Name of the Vulnerable Software and Affected Versions HDF5 versions prior to 2.2.0 Description A heap-based buffer overflow occurs in the H5VM array fill function within src/H5VM.c. This issue arises when H5D fill init fills the fill-value buffer using datatype and dataspace metadata from a craft...

MINI-VH3G-JQCC-H5VM

Bulletin has no description...

MINI-P943-H5VM-RCXW

Bulletin has no description...

MINI-5WWF-2J35-H5VM

Bulletin has no description...

PT-2026-76458

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=511687450 Crash type: Heap-buffer-overflow READ 4 Crash state: H5VM memcpyvv H5D compact readvv H5D select io...

JLSEC-2026-318

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5VMarrayfill in H5VM.c called from H5Sselectelements in H5Spoint.c...

PT-2026-39383

hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5VM memcpyvv function...

PT-2026-39355

HDF5 Library through 1.14.3 has a SEGV in H5VM memcpyvv in H5VM.c...

PT-2026-39364

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5VM array fill in H5VM.c called from H5S select elements in H5Spoint.c...

MINI-6GW4-H5VM-9H7R

Bulletin has no description...

PT-2025-23237

Name of the Vulnerable Software and Affected Versions hdf5 version 1.14.6 Description A heap buffer overflow issue was discovered via the H5VM memcpyvv function. Recommendations For version 1.14.6, consider restricting the use of the H5VM memcpyvv function until a patch is available...

hdf5: multiple CVEs

HDF5 Library through 1.14.3 has a SEGV in H5VMmemcpyvv in H5VM.c...

HDF5 H5VM_array_fill Buffer Overflow

The vulnerability of the H5VMarrayfill function in the H5VM.c file of the HDF5 library is related to buffer overflow in the queue. Exploitation of this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

UBUNTU-CVE-2024-32605

HDF5 Library through 1.14.3 has a heap-based buffer over-read in H5VMmemcpyvv in H5VM.c called from H5Dcompactreadvv in H5Dcompact.c...

HDF5 Library through 1.14.3 has a SEGV in H5VM_memcpyvv in H5VM.c.

...

PT-2024-6203

Name of the Vulnerable Software and Affected Versions HDF5 Library versions 1.14.3 and earlier Description The issue is related to a function H5VM memcpyvv in the file H5VM.c of the HDF5 Library, which is associated with a memory access out of bounds. This can potentially allow a remote attacker ...

PT-2024-6194

Name of the Vulnerable Software and Affected Versions HDF5 Library versions through 1.14.3 Description The issue is related to a heap-based buffer overflow in the H5VM array fill function in the H5VM.c file of the HDF5 Library. This overflow can be triggered when the H5S select elements function ...

PT-2021-28073

Name of the Vulnerable Software and Affected Versions HDF5 affected versions not specified Description A heap buffer overflow read issue has been identified. The crash state indicates the involvement of functions such as H5MM memcpy, H5VM memcpyvv, and H5D compact readvv. No information is...

PT-2021-28047

Name of the Vulnerable Software and Affected Versions HDF5 affected versions not specified Description A heap buffer overflow read issue has been identified. The crash state indicates involvement of functions such as H5MM memcpy, H5VM memcpyvv, and H5D compact readvv. No information is available...

PT-2020-22590

Name of the Vulnerable Software and Affected Versions HDF5 affected versions not specified Description A crash issue has been identified, characterized as an UNKNOWN READ. The crash state involves functions such as H5VM memcpyvv, H5D compact readvv, and H5D select io. No information is available...