CVE-2026-19027: Out-of-bounds Read

The H5Znbitdecompressonebyte, H5Znbitdecompressonenooptype, and H5Znbitdecompressoneatomic functions in H5Znbit.c in HDF5 prior to 2.3.0 advance a read index into the compressed chunk buffer without bounding it against the buffer's actual size. This allows attackers to cause an out-of-bounds heap...

CVE-2026-19027

The H5Znbitdecompressonebyte, H5Znbitdecompressonenooptype, and H5Znbitdecompressoneatomic functions in H5Znbit.c in HDF5 prior to 2.3.0 advance a read index into the compressed chunk buffer without bounding it against the buffer's actual size. This allows attackers to cause an out-of-bounds heap...

CVE-2026-19026

H5Zfilternbit in H5Znbit.c in HDF5 prior to 2.3.0 dereferences cdvalues0 through cdvalues4 without validating that cdvalues is non-NULL or that cdnelmts is at least 5, the fixed size of the filter's header. This allows attackers to cause a denial of service via a crafted HDF5 file that stores the...

PT-2026-68348

Name of the Vulnerable Software and Affected Versions HDF5 versions prior to 2.3.1 Description The H5Z filter nbit function in H5Znbit.c dereferences cd values0 through cd values4 without verifying that cd values is non-NULL or that cd nelmts is at least 5, which is the required size for the filt...

PT-2026-68353

Name of the Vulnerable Software and Affected Versions HDF5 versions prior to 2.3.1 Description The functions H5Z nbit decompress one byte, H5Z nbit decompress one nooptype, and H5Z nbit decompress one atomic in H5Znbit.c advance a read index into the compressed chunk buffer without bounding it...

CVE-2026-19026: NULL Pointer Dereference

H5Zfilternbit in H5Znbit.c in HDF5 prior to 2.3.0 dereferences cdvalues0 through cdvalues4 without validating that cdvalues is non-NULL or that cdnelmts is at least 5, the fixed size of the filter's header. This allows attackers to cause a denial of service via a crafted HDF5 file that stores the...

h5ls Buffer Overflow DoS

The vulnerability of the h5ls content analysis program arises due to buffer overflows during the processing of command-line parameters. Exploiting this vulnerability can allow an attacker to cause a service failure by entering a specially crafted sequence of data in the command line...

PT-2018-2837

Name of the Vulnerable Software and Affected Versions h5ls affected versions not specified Description The issue is caused by a buffer overflow when processing command line parameters, which can lead to a denial of service. This occurs when a specially crafted sequence of data is input into the...