Hdfgroup vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-34734 HDF5 is software for managing data.High 7.8 · Apr 9, 2026
• CVE-2026-26200 HDF5 is software for managing data.High 7.8 · Feb 19, 2026
• CVE-2025-44905 hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5Z__filter_scaleoffset function.High 8.8 · May 30, 2025
• CVE-2025-44904 hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5VM_memcpyvv function.High 8.8 · May 30, 2025
• CVE-2024-32608 HDF5 library through 1.14.3 has memory corruption in H5A__close resulting in the corruption of the instruction pointer and causing denial of service or potentiaCritical 9.8 · Oct 9, 2024
• CVE-2024-33877 HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5T__conv_struct_opt in H5Tconv.c.High 8.8 · May 14, 2024
• CVE-2024-33874 HDF5 Library through 1.14.3 has a heap buffer overflow in H5O__mtime_new_encode in H5Omtime.c.Critical 9.8 · May 14, 2024
• CVE-2024-33873 HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5D__scatter_mem in H5Dscatgath.c.High 8.8 · May 14, 2024
• CVE-2024-32624 HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5T__ref_mem_setnull in H5Tref.c (called from H5T__conv_ref in H5Tconv.c), resulting in theHigh 7.4 · May 14, 2024
• CVE-2024-32623 HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5VM_array_fill in H5VM.c (called from H5S_select_elements in H5Spoint.c).High 8.8 · May 14, 2024
• CVE-2024-32622 HDF5 Library through 1.14.3 contains a out-of-bounds read operation in H5FL_arr_malloc in H5FL.c (called from H5S_set_extent_simple in H5S.c).Critical 9.1 · May 14, 2024
• CVE-2024-32621 HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5HG_read in H5HG.c (called from H5VL__native_blob_get in H5VLnative_blob.c), resulting in Critical 9.8 · May 14, 2024
• CVE-2024-32620 HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5F_addr_decode_len in H5Fint.c, resulting in the corruption of the instruction pointer.High 7.4 · May 14, 2024
• CVE-2024-32619 HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5T_copy_reopen in H5T.c, resulting in the corruption of the instruction pointer.High 7.4 · May 14, 2024
• CVE-2024-32618 HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5T__get_native_type in H5Tnative.c, resulting in the corruption of the instruction pointerHigh 7.4 · May 14, 2024
• CVE-2024-32617 HDF5 Library through 1.14.3 contains a heap-based buffer over-read caused by the unsafe use of strdup in H5MM_xstrdup in H5MM.c (called from H5G__ent_to_link inHigh 8.8 · May 14, 2024
• CVE-2024-32616 HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5O__dtype_encode_helper in H5Odtype.c.High 7.4 · May 14, 2024
• CVE-2024-32615 HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5Z__nbit_decompress_one_byte in H5Znbit.c, caused by the earlier use of an initialized poiCritical 9.8 · May 14, 2024
• CVE-2024-32614 HDF5 Library through 1.14.3 has a SEGV in H5VM_memcpyvv in H5VM.c.High 8.8 · May 14, 2024
• CVE-2024-32613 HDF5 Library through 1.14.3 contains a heap-based buffer over-read in the function H5HL__fl_deserialize in H5HLcache.c, a different vulnerability than CVE-2024-High 7.4 · May 14, 2024
• CVE-2024-32612 HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5HL__fl_deserialize in H5HLcache.c, resulting in the corruption of the instruction pointeHigh 7.4 · May 14, 2024
• CVE-2024-32609 HDF5 Library through 1.14.3 allows stack consumption in the function H5E_printf_stack in H5Eint.c.High 7.5 · May 14, 2024
• CVE-2024-32605 HDF5 Library through 1.14.3 has a heap-based buffer over-read in H5VM_memcpyvv in H5VM.c (called from H5D__compact_readvv in H5Dcompact.c).High 8.8 · May 14, 2024
• CVE-2024-29165 HDF5 through 1.14.3 contains a buffer overflow in H5Z__filter_fletcher32, resulting in the corruption of the instruction pointer and causing denial of service oHigh 7.4 · May 14, 2024
• CVE-2024-29164 HDF5 through 1.14.3 contains a stack buffer overflow in H5R__decode_heap, resulting in the corruption of the instruction pointer and causing denial of service oCritical 9.8 · May 14, 2024