The HDF Group
- Total products in the ecosystem
- 3
- Total vulnerabilities (90 days)
- 9
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/08/2026, The HDF Group recorded 9 security vulnerabilities in the last 90 days across 3 products, including 1 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, HDF5 had the most security vulnerabilities in the The HDF Group ecosystem, with 7 vulnerabilities—approximately 77.78% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-120758NULL Pointer Dereference in H5HL_unprotect via Corrupted FileCVE-2026-120757Heap Buffer Over-read via Non-Terminated Link Data in H5L__extern_traverseCVE-2026-120756Heap Buffer Over-read via Malformed Message Size in HDF5's H5O__chunk_deserializeCVE-2026-120755Integer Underflow Leads to Out-of-Bounds Read via Truncated Chunk in HDF5 Szip FilterCVE-2026-120754Uninitialized Heap Memory Disclosure via Truncated Chunk in HDF5 Scale-Offset Filter| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-120758NULL Pointer Dereference in H5HL_unprotect via Corrupted File | Exploitation statusNot exploited | FixYes |
| Published11/03/2026 |
| SeverityMedium |
CVE-2026-120757Heap Buffer Over-read via Non-Terminated Link Data in H5L__extern_traverse | Exploitation statusNot exploited | FixYes | Affected productHDF5 | Published11/03/2026 | SeverityMedium |
|---|
CVE-2026-120756Heap Buffer Over-read via Malformed Message Size in HDF5's H5O__chunk_deserialize | Exploitation statusActively exploited | FixYes | Affected productHDF5 | Published11/03/2026 | SeverityLow |
|---|
CVE-2026-120755Integer Underflow Leads to Out-of-Bounds Read via Truncated Chunk in HDF5 Szip Filter | Exploitation statusNot exploited | FixYes | Affected productSzip Filter | Published11/03/2026 | SeverityMedium |
|---|
CVE-2026-120754Uninitialized Heap Memory Disclosure via Truncated Chunk in HDF5 Scale-Offset Filter | Exploitation statusNot exploited | FixYes | Affected productScale-Offset Filter | Published11/03/2026 | SeverityLow |
|---|
CVE-2026-120689Uncontrolled Recursion in HDF5 H5B__iterate_helper() via Crafted File | Exploitation statusNot exploited | FixNo | Affected productHDF5 | Published11/02/2026 | SeverityMedium |
|---|
CVE-2026-19029HDF5 scale-offset filter heap buffer over-read via crafted chunk | Exploitation statusNot exploited | FixNo | Affected productHDF5 | Published10/06/2026 | SeverityMedium |
|---|
CVE-2026-106547HDF5 heap buffer overflow in H5VM_array_fill via crafted fill-value metadata | Exploitation statusNot exploited | FixYes | Affected productHDF5 | Published10/06/2026 | SeverityHigh |
|---|
CVE-2026-92627Heap Use-After-Free in H5T__conv_f_f | Exploitation statusNot exploited | FixNo | Affected productHDF5 | Published09/16/2026 | SeverityMedium |
|---|
CVE-2026-19028HDF5 integer underflow in Fletcher32 filter leads to massive out-of-bounds read | Exploitation statusActively exploited | FixNo | Affected productHDF5 | Published08/05/2026 | SeverityMedium |
|---|
CVE-2026-19027HDF5 out-of-bounds heap read in N-Bit filter decompression | Exploitation statusActively exploited | FixNo | Affected productHDF5 | Published08/05/2026 | SeverityMedium |
|---|
CVE-2026-19026Nbit filter NULL/short parameter-array dereference | Exploitation statusActively exploited | FixNo | Affected productHDF5 | Published08/05/2026 | SeverityMedium |
|---|
CVE-2026-19025HDF5 divide-by-zero (SIGFPE) via mismatched chunk-layout dimensionality and dataspace rank on dataset open | Exploitation statusActively exploited | FixNo | Affected productHDF5 | Published08/05/2026 | SeverityMedium |
|---|
CVE-2026-19024HDF5 H5Pget_fill_value NULL Pointer Dereference via Malformed Fill Value Message | Exploitation statusActively exploited | FixNo | Affected productHDF5 | Published08/05/2026 | SeverityHigh |
|---|
CVE-2026-19023HDF5 h5dump Untrusted Pointer Dereference in Binary Output of Variable-Length String Datasets | Exploitation statusActively exploited | FixNo | Affected productHDF5 | Published08/05/2026 | SeverityMedium |
|---|
CVE-2026-17574NULL Pointer Dereference in HDF5 via Invalid Variable-Length Datatype Type Tag | Exploitation statusNot exploited | FixNo | Affected productHDF5 | Published07/27/2026 | SeverityMedium |
|---|
CVE-2026-17573Double Free in H5D__chunk_copy() in HDF5 via a Crafted Chunk-Index Size Field | Exploitation statusActively exploited | FixNo | Affected productHDF5 | Published07/27/2026 | SeverityMedium |
|---|
CVE-2026-17572HDF5 SOHM List Index Heap Buffer Overflow | Exploitation statusNot exploited | FixNo | Affected productHDF5 | Published07/27/2026 | SeverityMedium |
|---|
18 Results | Page 1 of 1