hdfgroup

Disclosed vulnerabilities where the NVD names hdfgroup as an affected vendor, highest CVSS first.

1. HIGH 7.1CVE-2026-120757public PoC2026-11-03

   HDF5 through 2.2.0 contains a heap buffer over-read vulnerability in H5L__extern_traverse() in src/H5Lexternal.c, the default traversal callback for external links. The callback locates the target file name and object path within the link’s user data using str…

   hdf5

   AI risk analysis on Exploit-DB.ai →

2. MEDIUM 6.1CVE-2026-120756public PoC2026-11-03

   HDF5 through 2.2.0 contains a heap buffer over-read vulnerability in H5O__chunk_deserialize() in src/H5Ocache.c. When decoding object header messages, the declared message size is checked against the end of the chunk image before the remainder of the message h…

   hdf5

   AI risk analysis on Exploit-DB.ai →

3. MEDIUM 5.5CVE-2026-120758public PoC2026-11-03

   HDF5 through 2.2.0 contains a NULL pointer dereference vulnerability in H5HL_unprotect() in src/H5HL.c. H5HL_protect() pins a single metadata cache entry for a local heap, either the heap prefix or the separate data block, and H5HL_unprotect() unpins it on the…

   hdf5

   AI risk analysis on Exploit-DB.ai →

4. MEDIUM 5.5CVE-2026-120755public PoC2026-11-03

   HDF5 through 2.2.0 contains an out-of-bounds read vulnerability in H5Z__filter_szip() in src/H5Zszip.c. When decoding a szip-compressed chunk, the function subtracts the 4-byte uncompressed-length header from the chunk length without first verifying that the c…

   hdf5

   AI risk analysis on Exploit-DB.ai →

5. LOW 3.3CVE-2026-120754public PoC2026-11-03

   HDF5 through 2.2.0 contains an uninitialized memory read vulnerability in H5Z__filter_scaleoffset() in src/H5Zscaleoffset.c. The decode path validates reads against the allocated size of the chunk buffer rather than the number of bytes actually read from the f…

   hdf5

   AI risk analysis on Exploit-DB.ai →