Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

hdf5 — Vulnerabilities & Security Advisories 39

All 39 CVE vulnerabilities found in hdf5, with AI-generated Chinese analysis, references, and POCs.

This page documents known Common Weakness Enumerations affecting HDF5, the versatile data management library developed by The HDF Group. It aggregates reported security vulnerabilities spanning from the product’s early releases through recent versions, providing a comprehensive historical view of weaknesses discovered within the software’s codebase and configuration. Users can utilize this resource to track vendor advisories issued by The HDF Group regarding specific security patches, gain a deeper understanding of prevalent vulnerability classes such as buffer overflows or input validation errors inherent to the file format, and investigate the detailed vulnerability history of any given HDF5 release. By consolidating data from various sources, this page serves as a centralized reference for security analysts, developers, and system administrators who need to assess the risk profile of HDF5 implementations. It facilitates the correlation of individual flaws with broader attack vectors, enabling better decision-making when integrating HDF5 into data pipelines or archival systems. The information presented is intended to support risk management and mitigation strategies by highlighting patterns in how security defects have been addressed over time. This structured overview helps stakeholders evaluate the maturity of security controls and identify areas requiring additional scrutiny or testing before deployment.

Vendor: n/a

CVE IDTitleCVSSSeverityPublished
CVE-2026-19028 HDF5 integer underflow in Fletcher32 filter leads to massive out-of-bounds read CWE-190 6.8 Medium2026-08-05
CVE-2026-19027 HDF5 out-of-bounds heap read in N-Bit filter decompression CWE-125 6.9 Medium2026-08-05
CVE-2026-19026 Nbit filter NULL/short parameter-array dereference CWE-476 6.8 Medium2026-08-05
CVE-2026-19025 HDF5 divide-by-zero (SIGFPE) via mismatched chunk-layout dimensionality and dataspace rank on dataset open CWE-369 6.8 Medium2026-08-05
CVE-2026-19024 HDF5 H5Pget_fill_value NULL Pointer Dereference via Malformed Fill Value Message CWE-476 8.2 High2026-08-05
CVE-2026-19023 HDF5 h5dump Untrusted Pointer Dereference in Binary Output of Variable-Length String Datasets CWE-822 6.8 Medium2026-08-05
CVE-2026-17574 NULL Pointer Dereference in HDF5 via Invalid Variable-Length Datatype Type Tag CWE-617 5.2 Medium2026-07-27
CVE-2026-17573 Double Free in H5D__chunk_copy() in HDF5 via a Crafted Chunk-Index Size Field CWE-415 4.0 Medium2026-07-27
CVE-2026-17572 HDF5 SOHM List Index Heap Buffer Overflow CWE-125 5.5 Medium2026-07-27
CVE-2026-26199 Buffer underflow in `H5Iget_name `/`H5G_get_name` if size is zero CWE-124--2026-07-20
CVE-2026-26197 Array full size, element count, and element size are not checked to make sure they match in H5Odtype.c CWE-125--2026-07-20
CVE-2026-29043 HDF5 H5T__ref_mem_setnull Heap Buffer Overflow CWE-122 5.5 Medium2026-04-10
CVE-2026-34734 HDF5: H5T__conv_struct Use After Free CWE-416 7.8 High2026-04-09
CVE-2026-26200 HDF5 Affected by H5T__conv_struct_opt Heap Buffer Overflow CWE-122 7.8 High2026-02-19
CVE-2025-7069 HDF5 H5FSsection.c H5FS__sect_link_size heap-based overflow CWE-122 3.3 Low2025-07-04
CVE-2025-7068 HDF5 H5FL.c H5FL__malloc memory leak CWE-401 3.3 Low2025-07-04
CVE-2025-7067 HDF5 H5FScache.c H5FS__sinfo_serialize_node_cb heap-based overflow CWE-122 3.3 Low2025-07-04
CVE-2025-6858 HDF5 H5Centry.c H5C__flush_single_entry null pointer dereference CWE-476 3.3 Low2025-06-29
CVE-2025-6857 HDF5 H5Gnode.c H5G__node_cmp3 stack-based overflow CWE-121 3.3 Low2025-06-29
CVE-2025-6856 HDF5 H5FL.c H5FL__reg_gc_list use after free CWE-416 3.3 Low2025-06-29
CVE-2025-6818 HDF5 H5Ochunk.c H5O__chunk_protect heap-based overflow CWE-122 3.3 Low2025-06-28
CVE-2025-6817 HDF5 H5Centry.c H5C__load_entry resource consumption CWE-400 3.3 Low2025-06-28
CVE-2025-6816 HDF5 H5Ofsinfo.c H5O__fsinfo_encode heap-based overflow CWE-122 3.3 Low2025-06-28
CVE-2025-6750 HDF5 H5Omtime.c H5O__mtime_new_encode heap-based overflow CWE-122 3.3 Low2025-06-27
CVE-2025-6516 HDF5 H5Fint.c H5F_addr_decode_len heap-based overflow CWE-122 5.3 Medium2025-06-23
CVE-2025-6270 HDF5 H5FSsection.c H5FS__sect_find_node heap-based overflow CWE-122 5.3 Medium2025-06-19
CVE-2025-6269 HDF5 H5Cimage.c H5C__reconstruct_cache_entry heap-based overflow CWE-122 5.3 Medium2025-06-19
CVE-2025-2926 HDF5 H5Ocache.c H5O__cache_chk_serialize null pointer dereference CWE-476 3.3 Low2025-03-28
CVE-2025-2925 HDF5 H5MM.c H5MM_realloc double free CWE-415 3.3 Low2025-03-28
CVE-2025-2924 HDF5 H5HLcache.c H5HL__fl_deserialize heap-based overflow CWE-122 3.3 Low2025-03-28

All 39 known CVE vulnerabilities affecting hdf5 with full Chinese analysis, references, and POCs where available.