Skip to contentThe Hdf Group Hdf5 vulnerabilities
- hdfgroup hdf5NULL Pointer Dereference in H5HL_unprotect via Corrupted FileCVE-2026-1207585.4 Medium
- hdfgroup hdf5Heap Buffer Over-read via Non-Terminated Link Data in H5L__extern_traverseCVE-2026-1207576.9 Medium
- hdfgroup hdf5Heap Buffer Over-read via Malformed Message Size in HDF5's H5O__chunk_deserializeCVE-2026-1207561.9 Low
- hdfgroup hdf5Uncontrolled Recursion in HDF5 H5B__iterate_helper() via Crafted FileCVE-2026-1206894.3 Medium
- hdfgroup hdf5HDF5 scale-offset filter heap buffer over-read via crafted chunkCVE-2026-190296.8 Medium
- hdfgroup hdf5HDF5 heap buffer overflow in H5VM_array_fill via crafted fill-value metadataCVE-2026-106547Fix available8.5 High
- hdfgroup hdf5Heap Use-After-Free in H5T__conv_f_fCVE-2026-926274.6 Medium
- hdfgroup hdf5HDF5 integer underflow in Fletcher32 filter leads to massive out-of-bounds readCVE-2026-19028Fix available6.8 Medium
- hdfgroup hdf5HDF5 out-of-bounds heap read in N-Bit filter decompressionCVE-2026-19027Fix available6.9 Medium
- hdfgroup hdf5Nbit filter NULL/short parameter-array dereferenceCVE-2026-19026Fix available6.8 Medium
- hdfgroup hdf5HDF5 divide-by-zero (SIGFPE) via mismatched chunk-layout dimensionality and dataspace rank on dataset openCVE-2026-19025Fix available6.8 Medium
- hdfgroup hdf5HDF5 H5Pget_fill_value NULL Pointer Dereference via Malformed Fill Value MessageCVE-2026-19024Fix available8.2 High
- hdfgroup hdf5HDF5 h5dump Untrusted Pointer Dereference in Binary Output of Variable-Length String DatasetsCVE-2026-190236.8 Medium
- hdfgroup hdf5NULL Pointer Dereference in HDF5 via Invalid Variable-Length Datatype Type TagCVE-2026-17574Fix available5.2 Medium
- hdfgroup hdf5Double Free in H5D__chunk_copy() in HDF5 via a Crafted Chunk-Index Size FieldCVE-2026-17573Fix available4.0 Medium
- hdfgroup hdf5HDF5 SOHM List Index Heap Buffer OverflowCVE-2026-17572Fix available5.5 Medium