Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

HDF5 — Vulnerabilities & Security Advisories 40

All 40 CVE vulnerabilities found in HDF5, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities affecting the HDF5 library, specifically cataloging weaknesses classified under memory safety issues and file parsing errors. It collects historical and recent advisories related to buffer overflows, integer overflows, and out-of-bounds accesses within the HDF5 codebase, covering reports published from 2018 through the present. Readers can use this aggregation to track vendor-issued security patches, understand the evolution of specific weakness classes such as use-after-free or null pointer dereferences, and review the complete vulnerability history of the HDF5 product without sifting through individual database entries.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-92627 Heap Use-After-Free in H5T__conv_f_f CWE-416 4.6 Medium 2026-09-16
CVE-2026-19028 HDF5 integer underflow in Fletcher32 filter leads to massive out-of-bounds read CWE-190 6.8 Medium 2026-08-05
CVE-2026-19027 HDF5 out-of-bounds heap read in N-Bit filter decompression CWE-125 6.9 Medium 2026-08-05
CVE-2026-19026 Nbit filter NULL/short parameter-array dereference CWE-476 6.8 Medium 2026-08-05
CVE-2026-19025 HDF5 divide-by-zero (SIGFPE) via mismatched chunk-layout dimensionality and dataspace rank on dataset open CWE-369 6.8 Medium 2026-08-05
CVE-2026-19024 HDF5 H5Pget_fill_value NULL Pointer Dereference via Malformed Fill Value Message CWE-476 8.2 High 2026-08-05
CVE-2026-19023 HDF5 h5dump Untrusted Pointer Dereference in Binary Output of Variable-Length String Datasets CWE-822 6.8 Medium 2026-08-05
CVE-2026-17574 NULL Pointer Dereference in HDF5 via Invalid Variable-Length Datatype Type Tag CWE-617 5.2 Medium 2026-07-27
CVE-2026-17573 Double Free in H5D__chunk_copy() in HDF5 via a Crafted Chunk-Index Size Field CWE-415 4.0 Medium 2026-07-27
CVE-2026-17572 HDF5 SOHM List Index Heap Buffer Overflow CWE-125 5.5 Medium 2026-07-27
CVE-2026-26199 Buffer underflow in `H5Iget_name `/`H5G_get_name` if size is zero CWE-124 - - 2026-07-20
CVE-2026-26197 Array full size, element count, and element size are not checked to make sure they match in H5Odtype.c CWE-125 - - 2026-07-20
CVE-2026-29043 HDF5 H5T__ref_mem_setnull Heap Buffer Overflow CWE-122 5.5 Medium 2026-04-10
CVE-2026-34734 HDF5: H5T__conv_struct Use After Free CWE-416 7.8 High 2026-04-09
CVE-2026-26200 HDF5 Affected by H5T__conv_struct_opt Heap Buffer Overflow CWE-122 7.8 High 2026-02-19
CVE-2025-7069 HDF5 H5FSsection.c H5FS__sect_link_size heap-based overflow CWE-122 3.3 Low 2025-07-04
CVE-2025-7068 HDF5 H5FL.c H5FL__malloc memory leak CWE-401 3.3 Low 2025-07-04
CVE-2025-7067 HDF5 H5FScache.c H5FS__sinfo_serialize_node_cb heap-based overflow CWE-122 3.3 Low 2025-07-04
CVE-2025-6858 HDF5 H5Centry.c H5C__flush_single_entry null pointer dereference CWE-476 3.3 Low 2025-06-29
CVE-2025-6857 HDF5 H5Gnode.c H5G__node_cmp3 stack-based overflow CWE-121 3.3 Low 2025-06-29
CVE-2025-6856 HDF5 H5FL.c H5FL__reg_gc_list use after free CWE-416 3.3 Low 2025-06-29
CVE-2025-6818 HDF5 H5Ochunk.c H5O__chunk_protect heap-based overflow CWE-122 3.3 Low 2025-06-28
CVE-2025-6817 HDF5 H5Centry.c H5C__load_entry resource consumption CWE-400 3.3 Low 2025-06-28
CVE-2025-6816 HDF5 H5Ofsinfo.c H5O__fsinfo_encode heap-based overflow CWE-122 3.3 Low 2025-06-28
CVE-2025-6750 HDF5 H5Omtime.c H5O__mtime_new_encode heap-based overflow CWE-122 3.3 Low 2025-06-27
CVE-2025-6516 HDF5 H5Fint.c H5F_addr_decode_len heap-based overflow CWE-122 5.3 Medium 2025-06-23
CVE-2025-6270 HDF5 H5FSsection.c H5FS__sect_find_node heap-based overflow CWE-122 5.3 Medium 2025-06-19
CVE-2025-6269 HDF5 H5Cimage.c H5C__reconstruct_cache_entry heap-based overflow CWE-122 5.3 Medium 2025-06-19
CVE-2025-2926 HDF5 H5Ocache.c H5O__cache_chk_serialize null pointer dereference CWE-476 3.3 Low 2025-03-28
CVE-2025-2925 HDF5 H5MM.c H5MM_realloc double free CWE-415 3.3 Low 2025-03-28

All 40 known CVE vulnerabilities affecting HDF5 with full Chinese analysis, references, and POCs where available.