https://vulnogram.org/ Most recent CVEs assigned by The HDF Group (hdfg). https://vulnogram.org/seaview/icons/hdfg.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-106547 https://vulnogram.org/CVE-2026-106547 A heap-based buffer overflow in H5VM_array_fill() in src/H5VM.c in HDF5 before 2.2.0 lets a remote attacker cause an application crash and possibly execute arbitrary code with a crafted HDF5 file. When a dataset's unallocated chunks are read, H5D__fi… High Tue, 06 Oct 2026 20:14:41 GMT https://vulnogram.org/CVE-2026-19029 https://vulnogram.org/CVE-2026-19029 A heap-based buffer over-read in H5Z__filter_scaleoffset() in src/H5Zscaleoffset.c in HDF5 through 2.2.0 lets an attacker cause a denial of service (application crash) with a crafted HDF5 file. When the stored minimum bits equal the full precision of… Medium Tue, 06 Oct 2026 20:01:36 GMT https://vulnogram.org/CVE-2026-92627 https://vulnogram.org/CVE-2026-92627 A heap-use-after-free vulnerability exists in H5T__conv_f_f() in src/H5Tconv.c in HDF5 before 1.14.2. When converting a compound datatype containing floating-point members during a dataset read, a temporary buffer allocated with calloc() is freed and… Medium Wed, 16 Sep 2026 15:16:54 GMT https://vulnogram.org/CVE-2026-19028 https://vulnogram.org/CVE-2026-19028 H5Z__filter_fletcher32 in H5Zfletcher32.c in HDF5 prior to 2.3.0 computes the data length to checksum by subtracting the 4-byte trailing checksum size from the input buffer size without checking that the buffer is at least 4 bytes, allowing a size_t… Medium Wed, 05 Aug 2026 23:15:09 GMT https://vulnogram.org/CVE-2026-19027 https://vulnogram.org/CVE-2026-19027 The H5Z__nbit_decompress_one_byte, H5Z__nbit_decompress_one_nooptype, and H5Z__nbit_decompress_one_atomic functions in H5Znbit.c in HDF5 prior to 2.3.0 advance a read index into the compressed chunk buffer without bounding it against the buffer's act… Medium Wed, 05 Aug 2026 23:12:20 GMT https://vulnogram.org/CVE-2026-19026 https://vulnogram.org/CVE-2026-19026 H5Z__filter_nbit in H5Znbit.c in HDF5 prior to 2.3.0 dereferences cd_values[0] through cd_values[4] without validating that cd_values is non-NULL or that cd_nelmts is at least 5, the fixed size of the filter's header. This allows attackers to cause a… Medium Wed, 05 Aug 2026 22:47:58 GMT https://vulnogram.org/CVE-2026-19025 https://vulnogram.org/CVE-2026-19025 H5O__layout_decode in H5Olayout.c in HDF5 through 2.3.0 does not validate that a chunked dataset's stored chunk-layout dimensionality matches its dataspace rank when an existing dataset is opened, whereas this check is performed only at dataset-creat… Medium Wed, 05 Aug 2026 22:35:11 GMT https://vulnogram.org/CVE-2026-19024 https://vulnogram.org/CVE-2026-19024 NULL pointer dereference in H5Pget_fill_value in HDF5 before 2.3.0 allows attackers to cause a denial of service via a dataset whose version 1 or 2 fill value message has the "defined" flag set together with a negative size field, which is not normal… High Wed, 05 Aug 2026 22:14:29 GMT https://vulnogram.org/CVE-2026-19023 https://vulnogram.org/CVE-2026-19023 Untrusted pointer dereference in the render_bin_output function in the h5dump tool in HDF5 before 2.3.0 allows attackers to cause a denial of service via a variable-length string dataset with more than one element dumped in binary mode, which corrupt… Medium Wed, 05 Aug 2026 22:13:45 GMT https://vulnogram.org/CVE-2026-17574 https://vulnogram.org/CVE-2026-17574 HDF5 contains a NULL pointer dereference vulnerability. Processing a crafted HDF5 file containing an attribute with an invalid variable-length datatype type field may cause the application to crash when the attribute is read. Medium Mon, 27 Jul 2026 15:12:18 GMT https://vulnogram.org/CVE-2026-17573 https://vulnogram.org/CVE-2026-17573 A double free vulnerability was discovered in the HDF5 library. Processing a crafted HDF5 file containing an oversized chunk size field via h5repack may cause the application to abort due to a double free. Medium Mon, 27 Jul 2026 15:11:54 GMT https://vulnogram.org/CVE-2026-17572 https://vulnogram.org/CVE-2026-17572 Heap-based buffer overflow in the SOHM list-index deserialization code in HDF5 through 2.1.1 on all platforms allows attackers to cause a denial of service (crash) via a crafted HDF5 file whose shared-message list index declares a num_messages count… Medium Mon, 27 Jul 2026 15:11:36 GMT