2107 matches found
CVE-2025-6269
A vulnerability classified as critical was found in HDF5 up to 1.14.6. Affected by this vulnerability is the function H5Creconstructcacheentry of the file H5Cimage.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the...
HDF5 安全漏洞
HDF5 is a library of HDF open source . HDF5 there is a buffer overflow vulnerability , the vulnerability stems from the file H5Cimage.c function H5Creconstructcacheentry failed to correctly validate the length of the input data size , an attacker can exploit the vulnerability to cause a denial of...
PT-2025-26227
Name of the Vulnerable Software and Affected Versions HDF5 versions up to 1.14.6 Description A critical issue has been found, affecting the H5FS sect find node function of the file H5FSsection.c, leading to a heap-based buffer overflow. The attack can be launched on the local host. Recommendation...
PT-2025-26226
Name of the Vulnerable Software and Affected Versions HDF5 versions up to 1.14.6 Description A critical vulnerability was found in HDF5, affecting the function H5C reconstruct cache entry of the file H5Cimage.c. This issue leads to a heap-based buffer overflow. The exploitation of this...
TencentOS Server 4: hdf5 (TSSA-2024:0175)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0175 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
TencentOS Server 4: hdf5 (TSSA-2025:0024)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0024 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
TencentOS Server 4: hdf5 (TSSA-2025:0023)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0023 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
SUSE CVE-2025-44905
hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5Zfilterscaleoffset function...
anndata (0.2.0), anndata-hdf5 (>=0.1.0, <=0.1.1) +102 more potentially affected by unknown CVE via arrow2 (>=0.5.3, <=0.17.4)
arrow2 CARGO version =0.5.3, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =0.2.1, =0.2.2, =0.4.0, =0.1.0, =0.15.0, =0.16.0 - geoarrow-wasm 0.1.0 - geoarrow2 0.0.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-WV8J-M3HX-924J...
AZL-62267 CVE-2025-44905 affecting package hdf5 for versions less than 1.14.6-1
hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5Zfilterscaleoffset function...
CVE-2025-44905
hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5Zfilterscaleoffset function...
DEBIAN-CVE-2025-44905
hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5Zfilterscaleoffset function...
AZL-72392 CVE-2025-44904 affecting package hdf5 1.14.6-1
hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5VMmemcpyvv function...
CVE-2025-44904
hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5VMmemcpyvv function...
DEBIAN-CVE-2025-44904
hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5VMmemcpyvv function...
AZL-72812 CVE-2025-44904 affecting package hdf5 1.14.6-1
hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5VMmemcpyvv function...
UBUNTU-CVE-2025-44905
hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5Zfilterscaleoffset function...
UBUNTU-CVE-2025-44904
hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5VMmemcpyvv function...
Heap-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the H5Zfilterscaleoffset function. An attacker can execute arbitrary code or cause a denial of service by exploiting this buffer overflow condition. Remediation A fix was pushed into the master branch but...
