HDF5
25 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-7069 | 1.14.6 | HDF5 H5FSsection.c H5FS__sect_link_size heap-based overflow | MEDIUM 4.8 | 0.3 % | ||
| CVE-2025-7068 | 1.14.6 | HDF5 H5FL.c H5FL__malloc memory leak | MEDIUM 4.8 | 0.2 % | ||
| CVE-2025-7067 | 1.14.6 | HDF5 H5FScache.c H5FS__sinfo_serialize_node_cb heap-based overflow | MEDIUM 4.8 | 0.3 % | ||
| CVE-2025-6858 | 1.14.6 | HDF5 H5Centry.c H5C__flush_single_entry null pointer dereference | MEDIUM 4.8 | 0.2 % | ||
| CVE-2025-6857 | 1.14.6 | HDF5 H5Gnode.c H5G__node_cmp3 stack-based overflow | MEDIUM 4.8 | 0.3 % | ||
| CVE-2025-6856 | 1.14.6 | HDF5 H5FL.c H5FL__reg_gc_list use after free | MEDIUM 4.8 | 0.2 % | ||
| CVE-2025-6818 | 1.14.6 | HDF5 H5Ochunk.c H5O__chunk_protect heap-based overflow | MEDIUM 4.8 | 0.3 % | ||
| CVE-2025-6817 | 1.14.6 | HDF5 H5Centry.c H5C__load_entry resource consumption | MEDIUM 4.8 | 0.2 % | ||
| CVE-2025-6816 | 1.14.6 | HDF5 H5Ofsinfo.c H5O__fsinfo_encode heap-based overflow | MEDIUM 4.8 | 0.3 % | ||
| CVE-2025-6750 | 1.14.6 | HDF5 H5Omtime.c H5O__mtime_new_encode heap-based overflow | MEDIUM 4.8 | 0.3 % | ||
| CVE-2025-6516 | 1.14.0 ; 1.14.1 ; 1.14.2 ; … | HDF5 H5Fint.c H5F_addr_decode_len heap-based overflow | MEDIUM 4.8 | 0.4 % | ||
| CVE-2025-6270 | 1.14.0 ; 1.14.1 ; 1.14.2 ; … | HDF5 H5FSsection.c H5FS__sect_find_node heap-based overflow | MEDIUM 4.8 | 0.3 % | ||
| CVE-2025-6269 | 1.14.0 ; 1.14.1 ; 1.14.2 ; … | HDF5 H5Cimage.c H5C__reconstruct_cache_entry heap-based overflow | MEDIUM 4.8 | 0.3 % | ||
| CVE-2025-2926 | 1.14.0 ; 1.14.1 ; 1.14.2 ; … | HDF5 H5Ocache.c H5O__cache_chk_serialize null pointer dereference | MEDIUM 4.8 | 0.3 % | ||
| CVE-2025-2925 | 1.14.0 ; 1.14.1 ; 1.14.2 ; … | HDF5 H5MM.c H5MM_realloc double free | MEDIUM 4.8 | 0.3 % | ||
| CVE-2025-2924 | 1.14.0 ; 1.14.1 ; 1.14.2 ; … | HDF5 H5HLcache.c H5HL__fl_deserialize heap-based overflow | MEDIUM 4.8 | 0.3 % | ||
| CVE-2025-2923 | 1.14.0 ; 1.14.1 ; 1.14.2 ; … | HDF5 H5Fint.c H5F_addr_encode_len heap-based overflow | MEDIUM 4.8 | 0.3 % | ||
| CVE-2025-2915 | 1.14.0 ; 1.14.1 ; 1.14.2 ; … | HDF5 H5Faccum.c H5F__accum_free heap-based overflow | MEDIUM 4.8 | 0.3 % | ||
| CVE-2025-2914 | 1.14.0 ; 1.14.1 ; 1.14.2 ; … | HDF5 H5FScache.c H5FS__sinfo_Srialize_Sct_cb heap-based overflow | MEDIUM 4.8 | 0.3 % | ||
| CVE-2025-2913 | 1.14.0 ; 1.14.1 ; 1.14.2 ; … | HDF5 H5FL.c H5FL__blk_gc_list use after free | MEDIUM 4.8 | 0.3 % | ||
| CVE-2025-2912 | 1.14.0 ; 1.14.1 ; 1.14.2 ; … | HDF5 H5Omessage.c H5O_msg_flush heap-based overflow | MEDIUM 4.8 | 0.3 % | ||
| CVE-2025-2310 | 1.14.6 | HDF5 Metadata Attribute Decoder H5MM_strndup heap-based overflow | MEDIUM 4.8 | 0.4 % | ||
| CVE-2025-2309 | 1.14.6 | HDF5 Type Conversion Logic H5T__bit_copy heap-based overflow | MEDIUM 4.8 | 0.4 % | ||
| CVE-2025-2308 | 1.14.6 | HDF5 Scale-Offset Filter H5Z__scaleoffset_decompress_one_byte heap-based overflow | MEDIUM 4.8 | 0.4 % | ||
| CVE-2025-2153 | 1.14.6 | HDF5 h5 File H5SM.c H5SM_delete heap-based overflow | LOW 2.3 | 0.5 % |