PT-2026-76458

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=511687450 Crash type: Heap-buffer-overflow READ 4 Crash state: H5VM memcpyvv H5D compact readvv H5D select io...

PT-2026-39383

hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5VM memcpyvv function...

PT-2025-23237

Name of the Vulnerable Software and Affected Versions hdf5 version 1.14.6 Description A heap buffer overflow issue was discovered via the H5VM memcpyvv function. Recommendations For version 1.14.6, consider restricting the use of the H5VM memcpyvv function until a patch is available...

hdf5: multiple CVEs

HDF5 Library through 1.14.3 has a SEGV in H5VMmemcpyvv in H5VM.c...

UBUNTU-CVE-2024-32605

HDF5 Library through 1.14.3 has a heap-based buffer over-read in H5VMmemcpyvv in H5VM.c called from H5Dcompactreadvv in H5Dcompact.c...

HDF5 Library through 1.14.3 has a SEGV in H5VM_memcpyvv in H5VM.c.

...

PT-2024-6203

Name of the Vulnerable Software and Affected Versions HDF5 Library versions 1.14.3 and earlier Description The issue is related to a function H5VM memcpyvv in the file H5VM.c of the HDF5 Library, which is associated with a memory access out of bounds. This can potentially allow a remote attacker ...

PT-2021-28073

Name of the Vulnerable Software and Affected Versions HDF5 affected versions not specified Description A heap buffer overflow read issue has been identified. The crash state indicates the involvement of functions such as H5MM memcpy, H5VM memcpyvv, and H5D compact readvv. No information is...

PT-2021-28047

Name of the Vulnerable Software and Affected Versions HDF5 affected versions not specified Description A heap buffer overflow read issue has been identified. The crash state indicates involvement of functions such as H5MM memcpy, H5VM memcpyvv, and H5D compact readvv. No information is available...

PT-2020-22590

Name of the Vulnerable Software and Affected Versions HDF5 affected versions not specified Description A crash issue has been identified, characterized as an UNKNOWN READ. The crash state involves functions such as H5VM memcpyvv, H5D compact readvv, and H5D select io. No information is available...

PT-2019-19395

Name of the Vulnerable Software and Affected Versions HDF5 version 1.10.4 Description An issue was discovered in the HDF5 library, where there is an out of bounds read in the function H5VM memcpyvv in H5VM.c when called from H5D compact readvv in H5Dcompact.c. Recommendations For version 1.10.4,...

PT-2018-12243

Name of the Vulnerable Software and Affected Versions HDF5 version 1.8.20 Description An issue was discovered in the HDF5 library, where there is an out-of-bounds read in the function H5VM memcpyvv in H5VM.c. Recommendations For version 1.8.20, consider updating to a newer version that contains a...