Known Vulnerabilities for HDF5 by The HDF Group
Listed below are 10 of the newest known vulnerabilities associated with "HDF5" by "The HDF Group".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-120758 json | HDF5 through 2.2.0 contains a NULL pointer dereference vulnerability in H5HL_unprotect() in src/H5HL.c. H5HL_protect() pins a... | Not Provided | 2026-11-03 | 2026-11-03 |
| CVE-2026-120757 json | HDF5 through 2.2.0 contains a heap buffer over-read vulnerability in H5L__extern_traverse() in src/H5Lexternal.c, the default... | Not Provided | 2026-11-03 | 2026-11-03 |
| CVE-2026-120756 json | HDF5 through 2.2.0 contains a heap buffer over-read vulnerability in H5O__chunk_deserialize() in src/H5Ocache.c. When decodin... | Not Provided | 2026-11-03 | 2026-11-03 |
| CVE-2026-120755 json | HDF5 through 2.2.0 contains an out-of-bounds read vulnerability in H5Z__filter_szip() in src/H5Zszip.c. When decoding a szip-... | Not Provided | 2026-11-03 | 2026-11-03 |
| CVE-2026-120754 json | HDF5 through 2.2.0 contains an uninitialized memory read vulnerability in H5Z__filter_scaleoffset() in src/H5Zscaleoffset.c. ... | Not Provided | 2026-11-03 | 2026-11-03 |
| CVE-2026-120689 json | HDF5 through 2.2.0 contains an uncontrolled recursion vulnerability in H5B__iterate_helper() in src/H5B.c. When iterating a v... | Not Provided | 2026-11-02 | 2026-11-02 |
| CVE-2026-108958 json | A weakness has been identified in TensorLayer up to 2.2.4. This affects the function load_hdf5_graph of the file tensorlayer/... | Not Provided | 2026-10-13 | 2026-10-14 |
| CVE-2026-106547 json | A heap-based buffer overflow in H5VM_array_fill() in src/H5VM.c in HDF5 before 2.2.0 lets a remote attacker cause an applicat... | Not Provided | 2026-10-06 | 2026-10-07 |
| CVE-2026-92627 json | A heap-use-after-free vulnerability exists in H5T__conv_f_f() in src/H5Tconv.c in HDF5 before 1.14.2. When converting a comp... | Not Provided | 2026-09-16 | 2026-09-17 |
| CVE-2026-86095 json | Unidata netcdf-c through 4.10.1 contains an out-of-bounds write vulnerability in NC4_HDF5_inq_attname() that copies HDF5 attr... | Not Provided | 2026-09-04 | 2026-09-08 |