CVE-2025-6816

HDF5 H5Ofsinfo.c H5O__fsinfo_encode heap-based overflow

A vulnerability classified as problematic was found in HDF5 1.14.6. This vulnerability affects the function H5O__fsinfo_encode of the file /src/H5Ofsinfo.c. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Hdfgroup

Products

Hdf5

CVE-2025-6269

HDF5 H5Cimage.c H5C__reconstruct_cache_entry heap-based overflow

A vulnerability classified as critical was found in HDF5 up to 1.14.6. Affected by this vulnerability is the function H5C__reconstruct_cache_entry of the file H5Cimage.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Hdfgroup

Products

Hdf5

CVE-2025-6750

HDF5 H5Omtime.c H5O__mtime_new_encode heap-based overflow

A vulnerability, which was classified as problematic, has been found in HDF5 1.14.6. Affected by this issue is the function H5O__mtime_new_encode of the file src/H5Omtime.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Hdfgroup

Products

Hdf5

CVE-2025-6516

HDF5 H5Fint.c H5F_addr_decode_len heap-based overflow

A vulnerability has been found in HDF5 up to 1.14.6 and classified as critical. This vulnerability affects the function H5F_addr_decode_len of the file /hdf5/src/H5Fint.c. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Hdfgroup

Products

Hdf5

CVE-2025-44904

hdf5: Heap Buffer Overflow in HDF5 H5VM_memcpyvv Function

hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5VM_memcpyvv function.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Hdfgroup

Products

Hdf5

CVE-2025-44905

hdf5: Heap Buffer Overflow in HDF5 Scale-Offset Filter

hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5Z__filter_scaleoffset function.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Hdfgroup

Products

Hdf5

CVE-2025-2308

HDF5 Scale-Offset Filter H5Z__scaleoffset_decompress_one_byte heap-based overflow

A vulnerability, which was classified as critical, was found in HDF5 1.14.6. This affects the function H5Z__scaleoffset_decompress_one_byte of the component Scale-Offset Filter. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The vendor plans to fix this issue in an upcoming release.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Hdfgroup

Products

Hdf5

CVE-2025-2309

HDF5 Type Conversion Logic H5T__bit_copy heap-based overflow

A vulnerability has been found in HDF5 1.14.6 and classified as critical. This vulnerability affects the function H5T__bit_copy of the component Type Conversion Logic. The manipulation leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor plans to fix this issue in an upcoming release.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Hdfgroup

Products

Hdf5

CVE-2025-2310

HDF5 Metadata Attribute Decoder H5MM_strndup heap-based overflow

A vulnerability was found in HDF5 1.14.6 and classified as critical. This issue affects the function H5MM_strndup of the component Metadata Attribute Decoder. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The vendor plans to fix this issue in an upcoming release.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Hdfgroup

Products

Hdf5

CVE-2025-2153

HDF5 h5 File H5SM.c H5SM_delete heap-based overflow

A vulnerability, which was classified as critical, was found in HDF5 1.14.6. Affected is the function H5SM_delete of the file H5SM.c of the component h5 File Handler. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used.

CVSS 4.0 · 2.3 Low EPSS < 1% KEV · Not listed

Vendors

Hdfgroup

Products

Hdf5

CVE-2017-17507

hdf5: Out-of-bounds read in the H5T_conv_struct_opt function

In HDF5 1.10.1, there is an out of bounds read vulnerability in the function H5T_conv_struct_opt in H5Tconv.c in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file.

CVSS 3.0 · 6.5 Medium EPSS 1.2% KEV · Not listed

Vendors

Hdfgroup

Products

Hdf5

CVE-2017-17506

hdf5: Out-of-bounds read in the H5Opline_pline_decode function

In HDF5 1.10.1, there is an out of bounds read vulnerability in the function H5Opline_pline_decode in H5Opline.c in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file.

CVSS 3.1 · 6.5 Medium EPSS 1.3% KEV · Not listed

Vendors

Hdfgroup

Products

Hdf5

CVE-2017-17505

hdf5: NULL pointer dereference in the H5O_pline_decode function

In HDF5 1.10.1, there is a NULL pointer dereference in the function H5O_pline_decode in the H5Opline.c file in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file.

CVSS 3.0 · 6.5 Medium EPSS 1.2% KEV · Not listed

Vendors

Hdfgroup

Products

Hdf5

CVE-2017-17509

hdf5: Out-of-bounds write in the H5G__ent_decode_vec function

In HDF5 1.10.1, there is an out of bounds write vulnerability in the function H5G__ent_decode_vec in H5Gcache.c in libhdf5.a. For example, h5dump would crash or possibly have unspecified other impact someone opens a crafted hdf5 file.

CVSS 3.0 · 8.8 High EPSS 1.5% KEV · Not listed

Vendors

Hdfgroup

Products

Hdf5

CVE-2017-17508

hdf5: Divide-by-zero in the H5T_set_loc function

In HDF5 1.10.1, there is a divide-by-zero vulnerability in the function H5T_set_loc in the H5T.c file in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file.

CVSS 3.0 · 6.5 Medium EPSS 1.2% KEV · Not listed

Vendors

Hdfgroup

Products

Hdf5

CVE-2024-32619

hdf5: multiple CVEs

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5T_copy_reopen in H5T.c, resulting in the corruption of the instruction pointer.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed

Vendors

Hdfgroup Redhat

Products

Hdf5 Enterprise Linux Ai

CVE-2024-32620

hdf5: multiple CVEs

HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5F_addr_decode_len in H5Fint.c, resulting in the corruption of the instruction pointer.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed

Vendors

Hdfgroup Redhat

Products

Hdf5 Enterprise Linux Ai

CVE-2024-32621

hdf5: multiple CVEs

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5HG_read in H5HG.c (called from H5VL__native_blob_get in H5VLnative_blob.c), resulting in the corruption of the instruction pointer.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Hdfgroup Redhat

Products

Hdf5 Enterprise Linux Ai

CVE-2024-32622

hdf5: multiple CVEs

HDF5 Library through 1.14.3 contains a out-of-bounds read operation in H5FL_arr_malloc in H5FL.c (called from H5S_set_extent_simple in H5S.c).

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed

Vendors

Hdfgroup Redhat

Products

Hdf5 Enterprise Linux Ai

CVE-2024-32623

hdf5: multiple CVEs

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5VM_array_fill in H5VM.c (called from H5S_select_elements in H5Spoint.c).

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Hdfgroup Redhat

Products

Hdf5 Enterprise Linux Ai