JLSEC-2026-293

HDF5 through 1.14.3 contains a heap buffer overflow in H5HGcacheheapdeserialize, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution...

PT-2026-39341

HDF5 through 1.14.3 contains a heap buffer overflow in H5HG cache heap deserialize, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution...

keras:fuzz_model: Crash in H5HG__cache_heap_deserialize

Detailed Report: https://oss-fuzz.com/testcase?key=6382329682788352 Project: keras Fuzzing Engine: libFuzzer Fuzz Target: fuzzmodel Job Type: libfuzzerasankeras Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x620800641b30 Crash State: H5HGcacheheapdeserialize H5Cprotect H5ACprotect...

HDF5 Cache Heap Deserialization

The vulnerability of the H5HGcacheheapdeserialize function in the HDF5 library is related to buffer overflow in the heap. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

HDF5 through 1.14.3 contains a heap buffer overflow in H5HG__cache_heap_deserialize resulting in the corruption of the instruction pointer and causing denial of service or potential code execution.

...

HDF Group HDF5 security vulnerabilities

HDF Group HDF5 is a suite of tools for managing and storing different types of data from the American company HDF Group. The product supports managing, manipulating, viewing and analyzing data and generating files in portable formats. A security vulnerability exists in HDF5 version 1.14.3 and pri...

opennavsurf-bag:bag_extended_fuzzer: Crash in H5HG__cache_heap_deserialize

Detailed Report: https://oss-fuzz.com/testcase?key=4787405367345152 Project: opennavsurf-bag Fuzzing Engine: libFuzzer Fuzz Target: bagextendedfuzzer Job Type: libfuzzerasanopennavsurf-bag Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x16db00011958 Crash State:...

PT-2022-7536

Name of the Vulnerable Software and Affected Versions HDF5 versions 1.13.3 and earlier HDF5 versions 1.14.2 and earlier Description The issue is related to a buffer overflow in the H5HG cache heap deserialize function of the HDF5 library, which can lead to a denial of service or potential code...

PT-2021-28015

Name of the Vulnerable Software and Affected Versions HDF5 affected versions not specified Description A crash occurs due to an unknown read issue. The crash state involves the H5HG cache heap deserialize, H5C load entry, and H5C protect functions. Recommendations At the moment, there is no...