PT-2026-76458

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=511687450 Crash type: Heap-buffer-overflow READ 4 Crash state: H5VM memcpyvv H5D compact readvv H5D select io...

JLSEC-2026-337

hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5VMmemcpyvv function...

JLSEC-2026-300

HDF5 Library through 1.14.3 has a heap-based buffer over-read in H5VMmemcpyvv in H5VM.c called from H5Dcompactreadvv in H5Dcompact.c...

PT-2026-39355

HDF5 Library through 1.14.3 has a SEGV in H5VM memcpyvv in H5VM.c...

PT-2026-39383

hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5VM memcpyvv function...

SUSE CVE-2025-44904

hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5VMmemcpyvv function...

UBUNTU-CVE-2025-44904

hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5VMmemcpyvv function...

PT-2025-23237

Name of the Vulnerable Software and Affected Versions hdf5 version 1.14.6 Description A heap buffer overflow issue was discovered via the H5VM memcpyvv function. Recommendations For version 1.14.6, consider restricting the use of the H5VM memcpyvv function until a patch is available...

hdf5: multiple CVEs

HDF5 Library through 1.14.3 has a SEGV in H5VMmemcpyvv in H5VM.c...

HDF5 H5VM memcpy buffer overflow

The vulnerability of the H5VMmemcpyvv function in the H5VM.c file of the HDF5 library is related to reading beyond the bounds of memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

UBUNTU-CVE-2024-32605

HDF5 Library through 1.14.3 has a heap-based buffer over-read in H5VMmemcpyvv in H5VM.c called from H5Dcompactreadvv in H5Dcompact.c...

HDF5 Library through 1.14.3 has a SEGV in H5VM_memcpyvv in H5VM.c.

...

PT-2024-6212

Name of the Vulnerable Software and Affected Versions HDF5 Library versions prior to 1.14.4 Description The issue is related to a heap-based buffer over-read in the H5VM memcpyvv function in the H5VM.c file of the HDF5 library. This can be exploited by a remote attacker to impact the...

PT-2024-6203

Name of the Vulnerable Software and Affected Versions HDF5 Library versions 1.14.3 and earlier Description The issue is related to a function H5VM memcpyvv in the file H5VM.c of the HDF5 Library, which is associated with a memory access out of bounds. This can potentially allow a remote attacker ...

PT-2021-28073

Name of the Vulnerable Software and Affected Versions HDF5 affected versions not specified Description A heap buffer overflow read issue has been identified. The crash state indicates the involvement of functions such as H5MM memcpy, H5VM memcpyvv, and H5D compact readvv. No information is...

PT-2021-28047

Name of the Vulnerable Software and Affected Versions HDF5 affected versions not specified Description A heap buffer overflow read issue has been identified. The crash state indicates involvement of functions such as H5MM memcpy, H5VM memcpyvv, and H5D compact readvv. No information is available...

PT-2020-22590

Name of the Vulnerable Software and Affected Versions HDF5 affected versions not specified Description A crash issue has been identified, characterized as an UNKNOWN READ. The crash state involves functions such as H5VM memcpyvv, H5D compact readvv, and H5D select io. No information is available...

PT-2019-19395

Name of the Vulnerable Software and Affected Versions HDF5 version 1.10.4 Description An issue was discovered in the HDF5 library, where there is an out of bounds read in the function H5VM memcpyvv in H5VM.c when called from H5D compact readvv in H5Dcompact.c. Recommendations For version 1.10.4,...

UBUNTU-CVE-2018-14035

An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5VMmemcpyvv in H5VM.c...

PT-2018-12291

Name of the Vulnerable Software and Affected Versions HDF5 version 1.8.20 Description A heap-based buffer over-read issue was found in the H5VM memcpyvv function in H5VM.c. Recommendations For version 1.8.20, update to a newer version that contains a fix for this issue...