CVE-2024-33876

CVE-2024-33876 affects HDF5 Library up to version 1.14.3, with a heap buffer overflow in H5S__point_deserialize (H5Spoint.c). The vulnerability is tied to HDF5’s data-space serialisation, and is reported as a heap buffer overflow with a local attack vector and potential impact on availability and...

CVE-2024-29157

CVE-2024-29157 affects HDF5 1.14.3 and earlier, with a heap buffer overflow in H5HG_read that can corrupt the instruction pointer and cause denial of service or potential code execution. The IBM/NVD entry notes a fix in 1.14.4 (and references the HDF Group advisory). Practical impact is DoS or po...

CVE-2025-44905

CVE-2025-44905 affects HDF5 v1.14.6. The issue is a heap-based buffer overflow in the H5Z__filter_scaleoffset path, enabling an attacker with local access to potentially exploit the vulnerability. Public references indicate a PoC exists and that vendor fixes are planned (OSV entries note a securi...

CVE-2024-32615

CVE-2024-32615 affects HDF5 Library up to 1.14.3. A heap-based buffer overflow in H5Z__nbit_decompress_one_byte (H5Znbit.c) is caused by an initialized pointer used earlier, enabling memory corruption under network access. Impact is described as high/possible denial of service or code execution. ...

CVE-2018-17435

CVE-2018-17435 is a heap-based buffer over-read in H5O_attr_decode() of HDF5 (H5Oattr.c) up to version 1.10.3, enabling a denial of service when processing a crafted HDF5 file (noted to occur during conversion to GIF). Connected advisories from SUSE (SUSE-SU-2022-1910/1911) document this CVE as f...

CVE-2024-32619

CVE-2024-32619 affects HDF5 Library up to version 1.14.3. The flaw is a heap-based buffer overflow in H5T_copy_reopen (H5T.c) that can corrupt the instruction pointer. Impact is denial of service or potential code execution. Remediation: upgrade to HDF5 1.14.4 or later where the issue is fixed. R...

CVE-2026-29043

CVE-2026-29043 affects HDF5; in versions 1.14.1-2 and earlier, an attacker who can provide an h5 file parsed by HDF5 can trigger a write-based heap buffer overflow in H5T__ref_mem_setnull, causing denial-of-service and, depending on exploitability on the target OS, potentially remote code executi...

CVE-2024-33877

CVE-2024-33877 affects HDF5 Library up to version 1.14.3, with a heap-based buffer overflow in H5T__conv_struct_opt (H5Tconv.c). This is cited in connected advisories as a vulnerability in HDF5 1.14.x, with public documentation of the same root cause. The Tencent/Tenable listings confirm the issu...

CVE-2024-32610

Summary (CVE-2024-32610): HDF5 Library versions up to 1.14.3 are affected. A SEGV in H5T_close_real (H5T.c) can corrupt the instruction pointer, risking crash or potential code execution as described in advisories. Remediation: upgrade to HDF5 1.14.4 or newer (per linked vendor update). Note: exp...

CVE-2025-2308

CVE-2025-2308 affects HDF5 1.14.6, specifically the H5Z__scaleoffset_decompress_one_byte function in the Scale-Offset Filter. The cited issue is a heap-based buffer overflow exploitable via local access; disclosure indicates public exploits and local attack requirements. Several trusted sources (...

CVE-2024-29160

HDF5 CVE-2024-29160 affects the H5HG__cache_heap_deserialize path in HDF5 up to version 1.14.3, causing a heap-based buffer overflow that can corrupt the instruction pointer and lead to denial of service or potential code execution. The connected IBM Security Bulletin confirms multiple related Ze...

CVE-2025-2153

CVE-2025-2153 impacts HDF5 1.14.6, specifically the H5SM_delete function in H5SM.c of the h5 File Handler. The vulnerability is a heap-based buffer overflow that can be triggered remotely; exploitation is described as difficult and is publicly disclosed. Connected sources confirm this as a critic...

CVE-2024-33875

The CVE-2024-33875 issue affects the HDF5 Library up to version 1.14.3, with a heap-based overflow in H5O__layout_encode (H5Olayout.c) that can corrupt the instruction pointer. Across connected advisories (Astra Linux, SUSE/OpenSUSE, Tencent/TASSA sheets, and related Nessus/OpenVAS entries), the ...

CVE-2024-32607

CVE-2024-32607 affects HDF5 Library up to 1.14.3. A SEGV in H5A__close (H5Aint.c) can corrupt the instruction pointer, per multiple vendor advisories. Impact is local, with potential denial of service or code execution as implied by prior CVEs in the same family; explicit exploitation status is n...

CVE-2024-29164

CVE-2024-29164 affects HDF5 up to version 1.14.3, where a stack buffer overflow in the decoder path H5R__decode_heap can corrupt the instruction pointer, enabling denial of service or potential code execution. The vulnerability is tied to HDF5 1.14.x releases and can be mitigated by upgrading to ...

CVE-2024-32606

CVE-2024-32606 : HDF5 Library up to version 1.14.3 may dereference uninitialized values in h5tools_str_sprint (called from h5tools_dump_simple_data). Affected file: tools/lib/h5tools_str.c. Root cause: uninitialized values could be dereferenced in h5tools_str_sprint, potentially leading to instab...

CVE-2024-29165

CVE-2024-29165 relates to HDF5 up to version 1.14.3, where a buffer overflow in H5Z__filter_fletcher32 can corrupt the instruction pointer, leading to denial of service and potential code execution. Affected product/version: HDF5

CVE-2024-33873

CVE-2024-33873 affects the HDF5 Library up to version 1.14.3 and involves a heap-based buffer overflow in H5D__scatter_mem (H5Dscatgath.c). The vulnerability is reported across multiple security feeds (e.g., Azure Linux 3.0 Nessus, vendor advisories) and is mitigated by upgrading to HDF5 1.14.4 o...

CVE-2020-10811

CVE-2020-10811 affects HDF5 up to 1.12.0 and is a heap-based buffer over-read in H5O__layout_decode() (H5Olayout.c) that can cause Denial of Service. Connected advisories confirm the issue in HDF5 and indicate fixes were provided in vendor updates (e.g., SUSE-SU-2022:1912-1 / SUSE-SU-2022:1933-1)...

CVE-2024-29166

CVE-2024-29166 affects HDF5 up to 1.14.3, where a buffer overflow in H5O__linfo_decode can corrupt the instruction pointer, enabling denial of service or potential code execution. A fix is available in HDF5 1.14.4 (per the referenced HDF5 security advisory). Affected products/versions are evidenc...

CVE-2024-32621

HDF5 Library up to 1.14.3 suffers a heap-based buffer overflow in H5HG_read (H5HG.c), invoked via H5VL__native_blob_get, which leads to instruction-pointer corruption. This affects HDF5 1.14.x and can enable denial of service or potential code execution. The issue is fixed in 1.14.4 per vendor ad...

CVE-2024-29162

HDF5 vulnerability CVE-2024-29162 is a stack buffer overflow in H5HG_read, affecting HDF5 up to 1.13.3 and/or 1.14.2, leading to denial of service or potential code execution. Affected component: H5HG_read in HDF5; root cause: stack buffer overflow; impact: DoS or possible code execution; remedia...

CVE-2024-32624

The CVE-2024-32624 entry refers to a heap-based buffer overflow in HDF5 Library up to version 1.14.3, specifically in H5T__ref_mem_setnull (H5Tref.c) invoked by H5T__conv_ref (H5Tconv.c), which can corrupt the instruction pointer. The connected materials confirm this vulnerability is associated w...

CVE-2024-32611

CVE-2024-32611 refers to the HDF5 Library issue up to version 1.14.3 where an uninitialized value may be used in H5A__attr_release_table (H5Aint.c). The IBM security entry confirms the vulnerability, describing it as a possible use of an uninitialized resource, with CVSS v3.1/3.3 metrics, indicat...

CVE-2024-32616

HDF5 Library prior to 1.14.4 is affected by a heap-based buffer over-read in H5O__dtype_encode_helper (H5Odtype.c) for CVE-2024-32616. Affected product: HDF5 Library (version 1.14.3 and earlier). Root cause: heap-based over-read in dtype encoding helper. Impact in the public description is limite...

CVE-2024-32620

CVE-2024-32620 is reported for the HDF5 Library up to version 1.14.3, where a heap-based buffer over-read in H5F_addr_decode_len (H5Fint.c) can corrupt the instruction pointer. Connected sources confirm this weakness exists in HDF5 prior to version 1.14.4 and cite a vendor advisory about fixes im...

CVE-2024-32612

CVE-2024-32612 (and related CVE-2024-32613) affect HDF5 Library

CVE-2024-32622

CVE-2024-32622 affects HDF5 Library up to version 1.14.3 and involves an out-of-bounds read in H5FL_arr_malloc (invoked from H5S_set_extent_simple in H5S.c via H5FL.c). Public technical detail from Tencent/TSSA advisory confirms the vulnerability and notes that a fix was issued in HDF5 1.14.4. Im...

CVE-2024-32609

CVE-2024-32609 affects the HDF5 Library up to version 1.14.3. The vulnerability is a stack consumption issue in H5E_printf_stack (H5Eint.c). Per the CVSS data, it has a high impact (Base score 7.5, CVSSv3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) with network attack vector and no confidentiality/in...

CVE-2024-32613

Affected: HDF5 Library up to 1.14.3. Vulnerability: heap-based buffer over-read in H5HL__fl_deserialize (H5HLcache.c) leading to potential instruction-pointer corruption. Root cause: improper handling in H5HL__fl_deserialize. Impact: data corruption or DoS as described; exploitation status not de...

CVE-2020-10812

CVE-2020-10812 affects the HDF5 library (through 1.12.0). The vulnerability is a NULL pointer dereference in H5F_get_nrefs() (H5Fquery.c) that can allow an attacker to trigger a Denial of Service. Affected product families include HDF5 and related utilities; multiple advisories note the issue and...

CVE-2024-29163

CVE-2024-29163: HDF5 (1.14.3 and earlier) has a heap-based overflow in H5T__bit_find that can corrupt the instruction pointer, enabling denial of service or potential code execution. Upgrading to HDF5 1.14.4 (or later) is the documented remediation. Affects HDF5 components as described in the con...

CVE-2024-32614

CVE-2024-32614 affects HDF5 Library up to 1.14.3, causing a SEGV in H5VM_memcpyvv (H5VM.c). Impact is a crash; no exploit details are provided in the documents beyond the segfault description. Affected product: HDF5 Library v1.14.x prior to 1.14.4. Remediation: upgrade to 1.14.4 as fixed by the H...

CVE-2024-29158

The CVE-2024-29158 entry affects HDF5 up to version 1.14.3, where a stack buffer overflow in H5FL_arr_malloc can corrupt the instruction pointer, leading to denial of service and potential code execution. The impact is localized (LOCAL) with high confidentiality and integrity/availability concern...

CVE-2024-29159

CVE-2024-29159 affects HDF5 up to version 1.14.3. It is a buffer overflow in H5Z__filter_scaleoffset that can corrupt the instruction pointer, leading to denial of service or potential code execution. Remediation: upgrade to HDF5 1.14.4 or later as per vendor advisories.

CVE-2018-14460

CVE-2018-14460 affects HDF5 1.8.20: a heap-based buffer over-read in H5O_sdspace_decode (H5Osdspace.c). The connected OSV entries confirm this CVE is addressed in SUSE/HPC advisories (e.g., SUSE-SU-2022:1933-1 and related OSV updates) as part of a security fix for HDF5, and multiple CVEs (includi...

CVE-2024-32617

The CVE-2024-32617 entry is supported by connected documentation: HDF5 Library through 1.14.3 contains a heap-based buffer over-read caused by unsafe use of strdup in H5MM_xstrdup (H5MM.c), called from H5G__ent_to_link (H5Glink.c). This affects HDF5 1.14.3 and can lead to memory corruption. The r...

CVE-2025-44904

CVE-2025-44904 affects HDF5 v1.14.6 with a heap-based buffer overflow in the H5VM_memcpyvv function, leading to memory corruption and potential crashes (CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, base score 8.8). Exploitation details are not provided in the connected documents. No patch/miti...

CVE-2024-32618

CVE-2024-32618 affects HDF5 Library up to v1.14.3, where a heap-based overflow in H5T__get_native_type (H5Tnative.c) can corrupt the instruction pointer. Impact is denial of service and potential code execution. The issue is fixed in HDF5 1.14.4; users should upgrade to 1.14.4 or later. The CVE e...

CVE-2018-17432

CVE-2018-17432: In HDF5 up to v1.10.3, a NULL pointer dereference in H5O_sdspace_encode() (H5Osdspace.c) can cause a denial of service when processing a crafted HDF5 file. The entry references a fixed issue in SUSE advisories (HDF5 updates) and notes a NULL pointer dereference vulnerability; no e...

CVE-2020-10809

CVE-2020-10809 describes a heap-based buffer overflow in HDF5’s Decompress() (decompress.c) that can be triggered by a crafted GIF-to-HDF5 file via the gif2h5 tool, leading to Denial of Service. The vulnerability is within HDF5 up to 1.12.0; multiple connected advisories (SUSE-SU-2022:1912-1 and ...

CVE-2020-10810

CVE-2020-10810 affects HDF5 up to version 1.12.0, with a NULL pointer dereference in H5AC_unpin_entry() (H5AC.c) that can cause a Denial of Service . Connected advisories from SUSE (SUSE-SU-2022:1912-1, -1933-1) confirm fixes for this CVE in later HDF5 patches. The vulnerability arises from deref...

CVE-2021-45830

CVE-2021-45830 is a heap-based buffer overflow in HDF5 1.13.1-1, exploitable via H5F_addr_decode_len in H5Fint.c and capable of Denial of Service. The vulnerability is confirmed in multiple sources referencing HDF5 1.13.1-1 and CVE-2021-45830; no exploitation details are provided in the supplied ...

CVE-2024-33874

CVE-2024-33874 affects HDF5 Library up to version 1.14.3, where a heap buffer overflow occurs in H5O__mtime_new_encode (H5Omtime.c). Public advisories (Tencent/TSSA-2024:0175) enumerate this CVE among a set of HDF5 issues; a mitigation is to upgrade to HDF5 1.14.4 or later as indicated by the ven...

CVE-2018-13869

CVE-2018-13869 affects HDF5 1.8.20; the issue is a memcpy parameter overlap in H5O_link_decode (H5Olink.c). Connected documents confirm the vulnerability and state it is fixed in advisory entries (SUSE OSV/NASL/Nessus references). There is no explicit exploitation detail in the provided texts, an...

CVE-2024-32608

The CVE-2024-32608 entry applies to the HDF5 library up to version 1.14.3, where memory corruption in H5A__close can corrupt the instruction pointer and lead to denial of service or potential code execution. Public references indicate a fix in HDF5 1.14.4, so upgrading to 1.14.4 or later mitigate...

CVE-2025-2915

CVE-2025-2915 affects HDF5 up to 1.14.6. The vulnerable component is the function H5F__accum_free in src/H5Faccum.c, where manipulation of the argument overlap_size triggers a heap-based buffer overflow. Local attack required. Public exploit information exists per the CVE, and the impact stated i...

CVE-2018-11206

CVE-2018-11206 is an out-of-bounds read in HDF5 1.10.2 (H5O_fill_new_decode and H5O_fill_old_decode in H5Ofill.c) that could enable remote denial of service or information disclosure. Public docs confirm the vulnerability and indicate fixed releases across distributions: Debian notes a fix in 1.1...

CVE-2018-13870

CVE-2018-13870 affects HDF5 1.8.20, causing a heap-based buffer over-read in H5O_link_decode (H5Olink.c). The vulnerability is cited across multiple advisories (e.g., SUSE-SU-2022:1933-1, SUSE-SU-2022:1911-1, SUSE-SU-2022:1903-1) and is acknowledged in Nessus OSVs as part of unpatched/have fixes....

CVE-2018-14033

CVE-2018-14033 is described in the provided documents as a heap-based buffer over-read in the HDF5 1.8.20 library, specifically in H5O_layout_decode (H5Olayout.c) related to memcpy. The connected records confirm the affected component (HDF5 1.8.20) and the vulnerable function. No explicit exploit...