2096 matches found
ROOT-OS-DEBIAN-11-CVE-2024-29157 CVE-2024-29157 in hdf5 - Patched by Root
Root has patched CVE-2024-29157 in the hdf5 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2024-32621 CVE-2024-32621 in hdf5 - Patched by Root
Root has patched CVE-2024-32621 in the hdf5 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2022-25942 CVE-2022-25942 in hdf5 - Patched by Root
Root has patched CVE-2022-25942 in the hdf5 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2024-29164 CVE-2024-29164 in hdf5 - Patched by Root
Root has patched CVE-2024-29164 in the hdf5 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2024-29161 CVE-2024-29161 in hdf5 - Patched by Root
Root has patched CVE-2024-29161 in the hdf5 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2024-32622 CVE-2024-32622 in hdf5 - Patched by Root
Root has patched CVE-2024-32622 in the hdf5 package for Root:Debian:11. Multiple fixed versions available...
CVE-2026-19027
A flaw was found in HDF5, a widely used data management library. This vulnerability allows an attacker to craft a malicious HDF5 file that, when processed, can cause the application to read beyond its allocated memory. This out-of-bounds read could lead to the disclosure of sensitive information ...
CVE-2026-19028
A flaw was found in HDF5. An attacker can craft a malicious HDF5 file with a specially designed Fletcher32-filtered chunk. When this file is processed, an integer underflow occurs due to insufficient size validation, leading to a massive out-of-bounds read. This vulnerability can cause the...
CVE-2026-19026
A flaw was found in HDF5. A remote attacker could craft a malicious HDF5 file that, when opened and read, would cause an application using the HDF5 library to crash. This issue stems from improper validation of input data within the N-Bit filter, leading to a denial of service DoS and impacting t...
CVE-2026-19024
A flaw was found in HDF5. A local attacker could exploit a vulnerability in the H5Pgetfillvalue function by providing a specially crafted dataset. This could lead to a denial of service, making the system unavailable. Mitigation To reduce risk prior to patching, restrict processing HDF5 files fro...
CVE-2026-19025
A flaw was found in HDF5. An attacker can craft a malicious HDF5 file that, when opened and read by an application, exploits a validation bypass. This bypass, related to mismatched chunk-layout dimensionality and dataspace rank, leads to a divide-by-zero error, causing a denial of service DoS and...
CVE-2026-26199 affecting package hdf5 for versions less than 1.14.6-4
CVE-2026-26199 affecting package hdf5 for versions less than 1.14.6-4. A patched version of the package is available...
CVE-2026-26197 affecting package hdf5 for versions less than 1.14.6-4
CVE-2026-26197 affecting package hdf5 for versions less than 1.14.6-4. A patched version of the package is available...
CVE-2026-17574 affecting package hdf5 for versions less than 1.14.6-4
CVE-2026-17574 affecting package hdf5 for versions less than 1.14.6-4. A patched version of the package is available...
CVE-2026-17573 affecting package hdf5 for versions less than 1.14.6-4
CVE-2026-17573 affecting package hdf5 for versions less than 1.14.6-4. A patched version of the package is available...
CVE-2026-17572 affecting package hdf5 for versions less than 1.14.6-4
CVE-2026-17572 affecting package hdf5 for versions less than 1.14.6-4. A patched version of the package is available...
PYSEC-2026-3629 Keras: HDF5 virtual datasets can disclose local files
Keras versions up to and including 3.13.2 are vulnerable to an arbitrary HDF5 file read due to an incomplete fix for CVE-2026-1669. The vulnerability resides in the H5IOStore.verifydataset and fileeditor.py methods, which fail to check the dataset.isvirtual property of HDF5 datasets. This allows ...
Keras: HDF5 virtual datasets can disclose local files
Keras versions up to and including 3.13.2 are vulnerable to an arbitrary HDF5 file read due to an incomplete fix for CVE-2026-1669. The vulnerability resides in the H5IOStore.verifydataset and fileeditor.py methods, which fail to check the dataset.isvirtual property of HDF5 datasets. This allows ...
Astra Linux – Vulnerability in hdf5
The HDF5 library versions up to 1.14.3 may attempt to dereference uninitialized values in h5toolsstrsprint in tools/lib/h5toolsstr.c called from h5toolsdumpsimpledata in tools/lib/h5toolsdump.c...