CVE-2024-33876

The HDF5 Library version through 1.14.3 is vulnerable to a heap buffer overflow in the H5S__point_deserialize function located in H5Spoint.c. This vulnerability can lead to denial of service or potential code execution , with the latter often resulting from the corruption of the instruction point...

CVE-2024-29157

HDF5 versions through 1.14.3 are vulnerable to a heap buffer overflow in the H5HG_read function. This flaw can lead to the corruption of the instruction pointer , potentially allowing an attacker to cause a denial of service or achieve code execution . Remediation involves updating to a patched v...

CVE-2025-44905

The HDF5 library (specifically version 1.14.6 ) contains a heap buffer overflow vulnerability within the H5Z__filter_scaleoffset function. This flaw allows for potential memory corruption. While the specific impact is not detailed, the vulnerability is classified as problematic in various securit...

CVE-2026-29043

CVE-2026-29043 affects HDF5; in versions 1.14.1-2 and earlier, an attacker who can provide an h5 file parsed by HDF5 can trigger a write-based heap buffer overflow in H5T__ref_mem_setnull, causing denial-of-service and, depending on exploitability on the target OS, potentially remote code executi...

CVE-2024-32619

The HDF5 Library through version 1.14.3 contains a heap-based buffer overflow in the H5T_copy_reopen function located in H5T.c. This vulnerability can lead to the corruption of the instruction pointer . The issue has been addressed in HDF5 version 1.14.4 . Patches are available for Root:Debian:12...

CVE-2018-17435

CVE-2018-17435 is a heap-based buffer over-read in H5O_attr_decode() of HDF5 (H5Oattr.c) up to version 1.10.3, enabling a denial of service when processing a crafted HDF5 file (noted to occur during conversion to GIF). Connected advisories from SUSE (SUSE-SU-2022-1910/1911) document this CVE as f...

CVE-2024-32615

The HDF5 Library (through version 1.14.3 ) is vulnerable to a heap-based buffer overflow in the H5Z__nbit_decompress_one_byte function located in H5Znbit.c. The root cause is the earlier use of an initialized pointer. This vulnerability can lead to denial of service or potential code execution an...

CVE-2025-2308

CVE-2025-2308 affects HDF5 1.14.6, specifically the H5Z__scaleoffset_decompress_one_byte function in the Scale-Offset Filter. The cited issue is a heap-based buffer overflow exploitable via local access; disclosure indicates public exploits and local attack requirements. Several trusted sources (...

CVE-2024-33877

The HDF5 Library through version 1.14.3 is susceptible to a heap-based buffer overflow within the H5T__conv_struct_opt function in H5Tconv.c. This vulnerability can lead to significant security impacts, including potential memory corruption. Remediation involves updating to version 1.14.4 or high...

CVE-2025-2153

CVE-2025-2153 impacts HDF5 1.14.6, specifically the H5SM_delete function in H5SM.c of the h5 File Handler. The vulnerability is a heap-based buffer overflow that can be triggered remotely; exploitation is described as difficult and is publicly disclosed. Connected sources confirm this as a critic...

CVE-2024-32621

The HDF5 Library (versions through 1.14.3 ) is susceptible to a heap-based buffer overflow in the H5HG_read function within H5HG.c. This vulnerability is triggered when the function is called from H5VL__native_blob_get in H5VLnative_blob.c, potentially leading to the corruption of the instruction...

CVE-2024-29160

The HDF5 library through version 1.14.3 contains a heap buffer overflow in the H5HG__cache_heap_deserialize function. This vulnerability can result in the corruption of the instruction pointer, leading to a denial of service (DoS) or potential arbitrary code execution . The issue has been address...

CVE-2024-32610

The HDF5 Library versions through 1.14.3 are vulnerable to a segmentation fault (SEGV) in the H5T_close_real function within H5T.c. This flaw results in a corrupted instruction pointer , which can lead to denial of service or potential code execution. The vulnerability has been addressed in versi...

CVE-2024-32607

The HDF5 Library versions through 1.14.3 are vulnerable to a SEGV (segmentation fault) within the H5A__close function in H5Aint.c . This flaw can lead to the corruption of the instruction pointer . Practical consequences include potential denial of service or code execution . Remediation involves...

CVE-2024-32614

The HDF5 Library (versions through 1.14.3 ) is vulnerable to a segmentation fault (SEGV) located in the H5VM_memcpyvv function within the H5VM.c file. This flaw results from an out-of-bounds read (CWE-125). The vulnerability impacts various distributions, including Astra Linux , Tencent Linux , a...

CVE-2024-32606

The HDF5 Library versions up to 1.14.3 are vulnerable to a flaw where the software may attempt to dereference uninitialized values in h5tools_str_sprint within tools/lib/h5tools_str.c. This issue is triggered when the function is called from h5tools_dump_simple_data in tools/lib/h5tools_dump.c. P...

CVE-2024-29164

The HDF5 library (through version 1.14.3 ) is vulnerable to a stack buffer overflow in the H5R__decode_heap function. This flaw can lead to the corruption of the instruction pointer, potentially enabling an attacker to cause a denial of service or achieve code execution . The vulnerability has be...

CVE-2024-29166

HDF5 versions through 1.14.3 contain a buffer overflow in the H5O__linfo_decode function. This vulnerability results in the corruption of the instruction pointer, potentially leading to denial of service or code execution . To address this issue, users should run the dnf update command on affecte...

CVE-2024-29162

The HDF5 library (versions through 1.13.3 and/or 1.14.2 ) is vulnerable to a stack buffer overflow in the H5HG_read function. This security flaw could allow an attacker to cause a denial of service or achieve potential code execution . The impact includes high risks to confidentiality, integrity,...

CVE-2024-32620

The HDF5 Library (versions through 1.14.3 ) is vulnerable to a heap-based buffer over-read within the H5F_addr_decode_len function in H5Fint.c. This flaw can lead to the corruption of the instruction pointer . Affected systems include Debian 12 , Tencent Linux , and RHEL AI 1.5 . Remediation incl...

CVE-2024-32622

The HDF5 Library (through version 1.14.3 ) is vulnerable to an out-of-bounds read operation. The flaw exists in the H5FL_arr_malloc function within H5FL.c, which is invoked by H5S_set_extent_simple in H5S.c. This vulnerability allows for potentially unauthorized data access. Remediation is availa...

CVE-2024-32624

The HDF5 Library through version 1.14.3 is vulnerable to a heap-based buffer overflow in the H5T__ref_mem_setnull function located in H5Tref.c (invoked from H5T__conv_ref in H5Tconv.c). This flaw can lead to the corruption of the instruction pointer . Mitigation is available in HDF5 version 1.14....

CVE-2020-10811

CVE-2020-10811 affects HDF5 up to 1.12.0 and is a heap-based buffer over-read in H5O__layout_decode() (H5Olayout.c) that can cause Denial of Service. Connected advisories confirm the issue in HDF5 and indicate fixes were provided in vendor updates (e.g., SUSE-SU-2022:1912-1 / SUSE-SU-2022:1933-1)...

CVE-2024-33875

The HDF5 Library versions through 1.14.3 are vulnerable to a heap-based buffer overflow in the H5O__layout_encode function located in H5Olayout.c. This flaw can lead to the corruption of the instruction pointer . Affected systems include Tencent Linux , Azure Linux 3.0 , and Astra Linux . Remedia...

CVE-2024-32616

The HDF5 Library versions through 1.14.3 are vulnerable to a heap-based buffer over-read located in the H5O__dtype_encode_helper function within H5Odtype.c. This vulnerability could potentially lead to the corruption of the instruction pointer. Remediation involves updating to the latest upstream...

CVE-2024-32623

The HDF5 Library (through version 1.14.3 ) is vulnerable to a heap-based buffer overflow in the H5VM_array_fill function within H5VM.c. This function is called from H5S_select_elements in H5Spoint.c. This vulnerability can lead to various impacts including memory corruption or potential code exec...

CVE-2024-33873

The HDF5 Library (versions through 1.14.3 ) contains a heap-based buffer overflow vulnerability in the H5D__scatter_mem function located in H5Dscatgath.c. This flaw can lead to memory corruption. The issue has been addressed in version 1.14.4 and is included in security updates for platforms such...

CVE-2024-29165

The HDF5 library (through version 1.14.3 ) is vulnerable to a heap-based buffer overflow in the H5Z__filter_fletcher32 function. This flaw can lead to the corruption of the instruction pointer , potentially resulting in a denial of service or arbitrary code execution . Affected products include D...

CVE-2024-32611

The HDF5 Library (versions through 1.14.3 ) is vulnerable to a flaw where it may use an uninitialized value in the H5A__attr_release_table field within the H5Aint.c file. This vulnerability is documented across multiple distributions, including Astra Linux , Tencent Linux , and Red Hat Enterprise...

CVE-2020-10812

CVE-2020-10812 affects the HDF5 library (through 1.12.0). The vulnerability is a NULL pointer dereference in H5F_get_nrefs() (H5Fquery.c) that can allow an attacker to trigger a Denial of Service. Affected product families include HDF5 and related utilities; multiple advisories note the issue and...

CVE-2024-32617

The HDF5 Library (versions through 1.14.3 ) is vulnerable to a heap-based buffer over-read . The root cause is the unsafe use of strdup in the H5MM_xstrdup function within H5MM.c, which is called from H5G__ent_to_link in H5Glink.c. This vulnerability affects various distributions, including Debia...

CVE-2024-32612

The HDF5 Library through version 1.14.3 is affected by a heap-based buffer over-read in the H5HL__fl_deserialize function located in H5HLcache.c. This vulnerability can lead to the corruption of the instruction pointer . While specific exploit details are not provided, the issue is acknowledged a...

CVE-2024-29158

The HDF5 library, through version 1.14.3 , contains a stack buffer overflow in the H5FL_arr_malloc function. This vulnerability can lead to the corruption of the instruction pointer, potentially resulting in a denial of service or code execution . The issue is reported in various Linux distributi...

CVE-2025-44904

The HDF5 library (specifically version 1.14.6 ) is vulnerable to a heap buffer overflow within the H5VM_memcpyvv function. This flaw can be triggered by reading from a specially crafted compact dataset, potentially leading to memory corruption and application crashes . While a patched version of ...

CVE-2018-14460

CVE-2018-14460 affects HDF5 1.8.20: a heap-based buffer over-read in H5O_sdspace_decode (H5Osdspace.c). The connected OSV entries confirm this CVE is addressed in SUSE/HPC advisories (e.g., SUSE-SU-2022:1933-1 and related OSV updates) as part of a security fix for HDF5, and multiple CVEs (includi...

CVE-2020-10810

CVE-2020-10810 affects HDF5 up to version 1.12.0, with a NULL pointer dereference in H5AC_unpin_entry() (H5AC.c) that can cause a Denial of Service . Connected advisories from SUSE (SUSE-SU-2022:1912-1, -1933-1) confirm fixes for this CVE in later HDF5 patches. The vulnerability arises from deref...

CVE-2024-32609

The HDF5 Library versions through 1.14.3 are vulnerable to a flaw in the H5E_printf_stack function located in H5Eint.c . This issue allows for stack consumption , which can lead to service instability. Remediation involves updating to the latest upstream version; notably, a fix was announced in v...

CVE-2025-2926

CVE-2025-2926 affects HDF5 up to 1.14.6. The issue is a null pointer dereference in H5O__cache_chk_serialize (src/H5Ocache.c). Local access is required to exploit; exploitation has been disclosed publicly. OSV entries corroborate this CVE and note a fix is planned/available via a patched package ...

CVE-2024-29163

HDF5 versions up to and including 1.14.3 are susceptible to a heap buffer overflow within the H5T__bit_find function. This vulnerability can lead to the corruption of the instruction pointer , potentially enabling an attacker to cause a denial of service or achieve code execution . The issue has ...

CVE-2024-29159

The HDF5 library through version 1.14.3 is vulnerable to a buffer overflow in the H5Z__filter_scaleoffset function. This flaw occurs due to copying buffers without checking the input data size, which can lead to the corruption of the instruction pointer . Exploitation of this vulnerability may re...

CVE-2024-33874

The HDF5 Library (versions through 1.14.3 ) is vulnerable to a heap buffer overflow in the H5O__mtime_new_encode function located in H5Omtime.c. This vulnerability can lead to memory corruption. Impacted products include TencentOS Server 4 , Astra Linux , and RHEL AI 1.5 (via the RHEL AI applicat...

CVE-2020-10809

CVE-2020-10809 describes a heap-based buffer overflow in HDF5’s Decompress() (decompress.c) that can be triggered by a crafted GIF-to-HDF5 file via the gif2h5 tool, leading to Denial of Service. The vulnerability is within HDF5 up to 1.12.0; multiple connected advisories (SUSE-SU-2022:1912-1 and ...

CVE-2024-32613

The HDF5 Library (versions through 1.14.3 ) is affected by a heap-based buffer over-read vulnerability located in the H5HL__fl_deserialize function within the H5HLcache.c file. This vulnerability is distinct from CVE-2024-32612. Impacting various environments, it has been addressed in several dis...

CVE-2021-37501

CVE-2021-37501 affects HDF5’s hdf5-h5dump, specifically 1.12.0–1.13.0, where a buffer overflow in h5tools_str_sprint can cause a denial of service. The Connected documents corroborate affected packages and link to advisories from multiple vendors. Exploitation details are not described in the Ini...

CVE-2024-32608

The CVE-2024-32608 entry applies to the HDF5 library up to version 1.14.3, where memory corruption in H5A__close can corrupt the instruction pointer and lead to denial of service or potential code execution. Public references indicate a fix in HDF5 1.14.4, so upgrading to 1.14.4 or later mitigate...

CVE-2025-2915

CVE-2025-2915 affects HDF5 up to 1.14.6. The vulnerable component is the function H5F__accum_free in src/H5Faccum.c, where manipulation of the argument overlap_size triggers a heap-based buffer overflow. Local attack required. Public exploit information exists per the CVE, and the impact stated i...

CVE-2024-32618

The HDF5 Library through version 1.14.3 is vulnerable to a heap-based buffer overflow in the H5T__get_native_type function within H5Tnative.c. This flaw can result in the corruption of the instruction pointer . Affected versions include those used in Azure Linux 3.0 , TencentOS Server 4 , and RHE...

CVE-2021-45830

CVE-2021-45830 is a heap-based buffer overflow in HDF5 1.13.1-1, exploitable via H5F_addr_decode_len in H5Fint.c and capable of Denial of Service. The vulnerability is confirmed in multiple sources referencing HDF5 1.13.1-1 and CVE-2021-45830; no exploitation details are provided in the supplied ...

CVE-2018-17237

CVE-2018-17237 affects HDF5 1.10.3. A SIGFPE (division by zero) occurs in H5D__chunk_set_info_real() within H5Dchunk.c during parsing of a crafted HDF file, due to insufficient protection against division by zero. Connected sources reference this HDF5 issue alongside related CVEs and note its con...

CVE-2018-13869

CVE-2018-13869 affects HDF5 1.8.20; the issue is a memcpy parameter overlap in H5O_link_decode (H5Olink.c). Connected documents confirm the vulnerability and state it is fixed in advisory entries (SUSE OSV/NASL/Nessus references). There is no explicit exploitation detail in the provided texts, an...