HDF5 vulnerabilities
We track 8 vulnerabilities in HDF5 products. 8 are rated high or critical, and none are known to be exploited. The most recent was published on June 29, 2025.
Latest HDF5 vulnerabilities
- 7.8 High severity
HDF5: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability has been found in HDF5 1.14.6 and classified as problematic. Affected by this vulnerability is the function H5G__node_cmp3 of the file src/H5Gnode.c. The manipulation leads to stack-based buffer overflow. It is possible to launch the attack on
- 7.8 High severity
HDF5: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability, which was classified as problematic, was found in HDF5 1.14.6. Affected is the function H5FL__reg_gc_list of the file src/H5FL.c. The manipulation leads to use after free. Attacking locally is a requirement. The exploit has been disclosed to t
- 7.8 High severity
HDF5: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability, which was classified as problematic, was found in HDF5 1.14.6. Affected is the function H5O__chunk_protect of the file /src/H5Ochunk.c. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit h
- 7.8 High severity
HDF5: Out-of-bounds Write
A vulnerability has been found in HDF5 up to 1.14.6 and classified as critical. This vulnerability affects the function H5F_addr_decode_len of the file /hdf5/src/H5Fint.c. The manipulation leads to heap-based buffer overflow. An attack has to be approached loc
- 7.8 High severity
HDF5: Out-of-bounds Write
A vulnerability was found in HDF5 1.14.6 and classified as critical. This issue affects the function H5MM_strndup of the component Metadata Attribute Decoder. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit
- 7.8 High severity
HDF5: Out-of-bounds Write
A vulnerability has been found in HDF5 1.14.6 and classified as critical. This vulnerability affects the function H5T__bit_copy of the component Type Conversion Logic. The manipulation leads to heap-based buffer overflow. Local access is required to approach t
- 7.8 High severity
HDF5: Out-of-bounds Write
A vulnerability, which was classified as critical, was found in HDF5 1.14.6. This affects the function H5Z__scaleoffset_decompress_one_byte of the component Scale-Offset Filter. The manipulation leads to heap-based buffer overflow. An attack has to be approach
- 8.1 High severity
HDF5: Out-of-bounds Write
A vulnerability, which was classified as critical, was found in HDF5 1.14.6. Affected is the function H5SM_delete of the file H5SM.c of the component h5 File Handler. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack rem