hdf5: HDF5 heap-based overflow

A vulnerability was found in the H5Creconstructcacheentry function of the H5Cimage.c file in HDF5. Input manipulation can occur, which leads to a heap-based buffer overflow. Exploitation of this vulnerability requires local system access...

hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5VM_memcpyvv function.

...

HDF5 H5FL.c H5FL__reg_gc_list use after free

...

HDF5 H5Ofsinfo.c H5O__fsinfo_encode heap-based overflow

...

HDF5 H5Ochunk.c H5O__chunk_protect heap-based overflow

...

HDF5 H5Centry.c H5C__flush_single_entry null pointer dereference

...

HDF5 H5Faccum.c H5F__accum_free heap-based overflow

...

HDF5 H5FScache.c H5FS__sinfo_Srialize_Sct_cb heap-based overflow

...

HDF5 H5Fint.c H5F_addr_encode_len heap-based overflow

...

HDF5 H5Ocache.c H5O__cache_chk_serialize null pointer dereference

...

HDF5 H5FL.c H5FL__blk_gc_list use after free

...

HDF5 H5Fint.c H5F_addr_decode_len heap-based overflow

...

HDF5 H5Omessage.c H5O_msg_flush heap-based overflow

...

Linux Distros Unpatched Vulnerability : CVE-2025-6858

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in HDF5 1.14.6 and classified as problematic. Affected by this issue is the function H5Cflushsingleentry of the file src/H5Centry.c. T...

Linux Distros Unpatched Vulnerability : CVE-2025-6816

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability classified as problematic was found in HDF5 1.14.6. This vulnerability affects the function H5Ofsinfoencode of the file /src/H5Ofsinfo.c. The...

Linux Distros Unpatched Vulnerability : CVE-2020-10812

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in HDF5 through 1.12.0. A NULL pointer dereference exists in the function H5Fgetnrefs located in H5Fquery.c. It allows an attacker to...

Linux Distros Unpatched Vulnerability : CVE-2018-17438

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A SIGFPE signal is raised in the function H5Dselectio of H5Dselect.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file,...

Linux Distros Unpatched Vulnerability : CVE-2018-15671

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the HDF HDF5 1.10.2 library. Excessive stack consumption has been detected in the function H5Pgetcb in H5Pint.c during an attempted...

Linux Distros Unpatched Vulnerability : CVE-2018-17436

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ReadCode in decompress.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service invalid write access via a crafted HDF5 file. This...

Linux Distros Unpatched Vulnerability : CVE-2025-2914

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability classified as problematic has been found in HDF5 up to 1.14.6. This affects the function H5FSsinfoSrializeSctcb of the file src/H5FScache.c. The...