The HDF Group
- Total products in the ecosystem
- 1
- Total vulnerabilities (90 days)
- 10
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Verify to analyze this security profile
As of 09/19/2026, The HDF Group recorded 10 security vulnerabilities in the last 90 days across 1 products, including 1 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, HDF5 had the most security vulnerabilities in the The HDF Group ecosystem, with 10 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-92627Heap Use-After-Free in H5T__conv_f_f | Exploitation statusNot confirmed | FixYes | Affected productHDF5 | Published09/16/2026 | SeverityMedium |
CVE-2026-19028HDF5 integer underflow in Fletcher32 filter leads to massive out-of-bounds read | Exploitation statusPublic exploit | FixNot confirmed | Affected productHDF5 | Published08/05/2026 | SeverityMedium |
CVE-2026-19027HDF5 out-of-bounds heap read in N-Bit filter decompression | Exploitation statusPublic exploit | FixNot confirmed | Affected productHDF5 | Published08/05/2026 | SeverityMedium |
CVE-2026-19026Nbit filter NULL/short parameter-array dereference | Exploitation statusPublic exploit | FixNot confirmed | Affected productHDF5 | Published08/05/2026 | SeverityMedium |
CVE-2026-19025HDF5 divide-by-zero (SIGFPE) via mismatched chunk-layout dimensionality and dataspace rank on dataset open | Exploitation statusPublic exploit | FixNot confirmed | Affected productHDF5 | Published08/05/2026 | SeverityMedium |
CVE-2026-19024HDF5 H5Pget_fill_value NULL Pointer Dereference via Malformed Fill Value Message | Exploitation statusPublic exploit | FixNot confirmed | Affected productHDF5 | Published08/05/2026 | SeverityHigh |
CVE-2026-19023HDF5 h5dump Untrusted Pointer Dereference in Binary Output of Variable-Length String Datasets | Exploitation statusPublic exploit | FixNot confirmed | Affected productHDF5 | Published08/05/2026 | SeverityMedium |
CVE-2026-17574NULL Pointer Dereference in HDF5 via Invalid Variable-Length Datatype Type Tag | Exploitation statusNot known exploited | FixNot confirmed | Affected productHDF5 | Published07/27/2026 | SeverityMedium |
CVE-2026-17573Double Free in H5D__chunk_copy() in HDF5 via a Crafted Chunk-Index Size Field | Exploitation statusPublic exploit | FixNot confirmed | Affected productHDF5 | Published07/27/2026 | SeverityMedium |
CVE-2026-17572HDF5 SOHM List Index Heap Buffer Overflow | Exploitation statusNot known exploited | FixNot confirmed | Affected productHDF5 | Published07/27/2026 | SeverityMedium |
