EUVD-2026-51922

A vulnerability in keras-team/keras versions = 3.14.0 allows arbitrary local HDF5 file content disclosure due to improper handling of HDF5 ExternalLinks. The KerasFileEditor and keras.saving.loadweights functions bypass the safegeth5group and safegeth5dataset helpers, which are designed to reject...

hdf5: multiple CVEs

HDF5 through 1.13.3 and/or 1.14.2 contains a stack buffer overflow in H5HGread, resulting in denial of service or potential code execution...

The vulnerability of the H5AC_unpin_entry component in the HDF5 library allows a perpetrator to influence the confidentiality, integrity, and accessibility of information.

The vulnerability of the H5ACunpinentry component in the HDF5 library is related to the dereferencing of NULL pointers. Exploiting this vulnerability could allow an attacker to influence the confidentiality, integrity, and accessibility of information...