PT-2026-107251

A heap-based buffer over-read in H5Z filter scaleoffset in src/H5Zscaleoffset.c in HDF5 through 2.2.0 lets an attacker cause a denial of service application crash with a crafted HDF5 file. When the stored minimum bits equal the full precision of the datatype, the decoder copies d nelmts size byte...

OESA-2026-2262 hdf5 security update

HDF5 is a data model, library, and file format for storing and managing data. It supports an unlimited variety of datatypes, and is designed for flexible and efficient I/O and for high volume and complex data. HDF5 is portable and is extensible, allowing applications to evolve in their use of HDF...

JLSEC-2026-338

hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5Zfilterscaleoffset function...

JLSEC-2026-292

HDF5 through 1.14.3 contains a buffer overflow in H5Zfilterscaleoffset, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution...

PT-2026-39340

HDF5 through 1.14.3 contains a buffer overflow in H5Z filter scaleoffset, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution...

PT-2026-39384

hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5Z filter scaleoffset function...

hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5Z__filter_scaleoffset function.

...

Linux Distros Unpatched Vulnerability : CVE-2025-2308

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability, which was classified as critical, was found in HDF5 1.14.6. This affects the function H5Zscaleoffsetdecompressonebyte of the component...

SUSE CVE-2025-44905

hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5Zfilterscaleoffset function...

AZL-62267 CVE-2025-44905 affecting package hdf5 for versions less than 1.14.6-1

hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5Zfilterscaleoffset function...

DEBIAN-CVE-2025-44905

hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5Zfilterscaleoffset function...

UBUNTU-CVE-2025-44905

hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5Zfilterscaleoffset function...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the H5Zfilterscaleoffset function. An attacker can execute arbitrary code or cause a denial of service by exploiting this buffer overflow condition. Remediation A fix was pushed into the master branch but...

HDF5 安全漏洞

HDF5 is an HDF open source library. A security vulnerability exists in HDF5 v1.14.6, which stems from a heap buffer overflow in the H5Zfilterscaleoffset function that could lead to the execution of arbitrary code...

PT-2025-23238

Name of the Vulnerable Software and Affected Versions hdf5 version 1.14.6 Description A heap buffer overflow was discovered via the H5Z filter scaleoffset function. Recommendations For version 1.14.6, consider disabling the H5Z filter scaleoffset function as a temporary workaround until a patch i...

hdf5: multiple CVEs

HDF5 through 1.14.3 contains a buffer overflow in H5Zfilterscaleoffset, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution...

SUSE CVE-2025-2308

A vulnerability, which was classified as critical, was found in HDF5 1.14.6. This affects the function H5Zscaleoffsetdecompressonebyte of the component Scale-Offset Filter. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed...

AZL-58815 CVE-2025-2308 affecting package hdf5 1.14.6-1

A vulnerability, which was classified as critical, was found in HDF5 1.14.6. This affects the function H5Zscaleoffsetdecompressonebyte of the component Scale-Offset Filter. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed...

HDF5 安全漏洞

HDF5 is a library of HDF open source . HDF5 has a buffer overflow vulnerability , the vulnerability stems from the H5Z scaleoffsetdecompressonebyte function fails to correctly validate the length of the input data size , an attacker can use this vulnerability to cause a denial of service...

AZL-40663 CVE-2024-29159 affecting package hdf5 for versions less than 1.14.4-1

HDF5 through 1.14.3 contains a buffer overflow in H5Zfilterscaleoffset, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution...