HDF5
- Software type
- Other
- Total vulnerabilities (90 days)
- 7
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/08/2026, HDF5 recorded 7 security vulnerabilities in the last 90 days, of which 1 is rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of HDF5 and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-120758NULL Pointer Dereference in H5HL_unprotect via Corrupted FileCVE-2026-120757Heap Buffer Over-read via Non-Terminated Link Data in H5L__extern_traverseCVE-2026-120756Heap Buffer Over-read via Malformed Message Size in HDF5's H5O__chunk_deserializeCVE-2026-120689Uncontrolled Recursion in HDF5 H5B__iterate_helper() via Crafted FileCVE-2026-19029HDF5 scale-offset filter heap buffer over-read via crafted chunk| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-120758NULL Pointer Dereference in H5HL_unprotect via Corrupted File | Exploitation statusNot exploited | FixYes |
| SeverityMedium |
CVE-2026-120757Heap Buffer Over-read via Non-Terminated Link Data in H5L__extern_traverse | Exploitation statusNot exploited | FixYes | Published11/03/2026 | SeverityMedium |
|---|
CVE-2026-120756Heap Buffer Over-read via Malformed Message Size in HDF5's H5O__chunk_deserialize | Exploitation statusActively exploited | FixYes | Published11/03/2026 | SeverityLow |
|---|
CVE-2026-120689Uncontrolled Recursion in HDF5 H5B__iterate_helper() via Crafted File | Exploitation statusNot exploited | FixNo | Published11/02/2026 | SeverityMedium |
|---|
CVE-2026-19029HDF5 scale-offset filter heap buffer over-read via crafted chunk | Exploitation statusNot exploited | FixNo | Published10/06/2026 | SeverityMedium |
|---|
CVE-2026-106547HDF5 heap buffer overflow in H5VM_array_fill via crafted fill-value metadata | Exploitation statusNot exploited | FixYes | Published10/06/2026 | SeverityHigh |
|---|
CVE-2026-92627Heap Use-After-Free in H5T__conv_f_f | Exploitation statusNot exploited | FixNo | Published09/16/2026 | SeverityMedium |
|---|
CVE-2026-19028HDF5 integer underflow in Fletcher32 filter leads to massive out-of-bounds read | Exploitation statusActively exploited | FixNo | Published08/05/2026 | SeverityMedium |
|---|
CVE-2026-19027HDF5 out-of-bounds heap read in N-Bit filter decompression | Exploitation statusActively exploited | FixNo | Published08/05/2026 | SeverityMedium |
|---|
CVE-2026-19026Nbit filter NULL/short parameter-array dereference | Exploitation statusActively exploited | FixNo | Published08/05/2026 | SeverityMedium |
|---|
CVE-2026-19025HDF5 divide-by-zero (SIGFPE) via mismatched chunk-layout dimensionality and dataspace rank on dataset open | Exploitation statusActively exploited | FixNo | Published08/05/2026 | SeverityMedium |
|---|
CVE-2026-19024HDF5 H5Pget_fill_value NULL Pointer Dereference via Malformed Fill Value Message | Exploitation statusActively exploited | FixNo | Published08/05/2026 | SeverityHigh |
|---|
CVE-2026-19023HDF5 h5dump Untrusted Pointer Dereference in Binary Output of Variable-Length String Datasets | Exploitation statusActively exploited | FixNo | Published08/05/2026 | SeverityMedium |
|---|
CVE-2026-17574NULL Pointer Dereference in HDF5 via Invalid Variable-Length Datatype Type Tag | Exploitation statusNot exploited | FixNo | Published07/27/2026 | SeverityMedium |
|---|
CVE-2026-17573Double Free in H5D__chunk_copy() in HDF5 via a Crafted Chunk-Index Size Field | Exploitation statusActively exploited | FixNo | Published07/27/2026 | SeverityMedium |
|---|
CVE-2026-17572HDF5 SOHM List Index Heap Buffer Overflow | Exploitation statusNot exploited | FixNo | Published07/27/2026 | SeverityMedium |
|---|
16 Results | Page 1 of 1