unnamed
organization01
roles
Roles this identity holds.
02
references
Other names and identifiers for this entity.
nvdUS 0253b833-3e77-4dfe-9d57-17db1a2f0a74
03
assessed vulnerabilities (12)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-19029US | — | — | ||
A heap-based buffer over-read in H5Z__filter_scaleoffset() in src/H5Zscaleoffset.c in HDF5 through 2.2.0 lets an attacker cause a denial of service (application crash) with a craft… | ||||
| CVE-2026-106547US | — | — | ||
A heap-based buffer overflow in H5VM_array_fill() in src/H5VM.c in HDF5 before 2.2.0 lets a remote attacker cause an application crash and possibly execute arbitrary code with a cr… | ||||
| CVE-2026-92627US | — | — | ||
A heap-use-after-free vulnerability exists in H5T__conv_f_f() in src/H5Tconv.c in HDF5 before 1.14.2. When converting a compound datatype containing floating-point members during a… | ||||
| CVE-2026-19028US | — | — | ||
H5Z__filter_fletcher32 in H5Zfletcher32.c in HDF5 prior to 2.3.0 computes the data length to checksum by subtracting the 4-byte trailing checksum size from the input buffer size wi… | ||||
| CVE-2026-19027US | — | — | ||
The H5Z__nbit_decompress_one_byte, H5Z__nbit_decompress_one_nooptype, and H5Z__nbit_decompress_one_atomic functions in H5Znbit.c in HDF5
prior to 2.3.0 advance a read index into th… | ||||
| CVE-2026-19026US | — | — | ||
H5Z__filter_nbit in H5Znbit.c in HDF5 prior to 2.3.0 dereferences cd_values[0] through cd_values[4] without validating that cd_values is non-NULL or that cd_nelmts is at least 5, t… | ||||
| CVE-2026-19025US | — | — | ||
H5O__layout_decode in H5Olayout.c in HDF5 through 2.3.0 does not validate that a chunked dataset's stored chunk-layout dimensionality matches its dataspace rank when an existing da… | ||||
| CVE-2026-19024US | — | — | ||
NULL pointer dereference in H5Pget_fill_value in HDF5 before 2.3.0 allows attackers to cause a denial of service via a dataset whose version 1 or 2 fill value message has the "defi… | ||||
| CVE-2026-19023US | — | — | ||
Untrusted pointer dereference in the render_bin_output function in the h5dump tool in HDF5 before 2.3.0 allows attackers to cause a denial of service via a variable-length string d… | ||||
| CVE-2026-17574US | medium5.5 | — | ||
HDF5 contains a NULL pointer dereference vulnerability. Processing a crafted HDF5 file containing an attribute with an invalid variable-length datatype type field may cause the app… | ||||
| CVE-2026-17573US | medium5.5 | — | ||
A double free vulnerability was discovered in the HDF5 library. Processing a crafted HDF5 file containing an oversized chunk size field via h5repack may cause the application to ab… | ||||
| CVE-2026-17572US | medium5.5 | — | ||
Heap-based buffer overflow in the SOHM list-index deserialization code in HDF5 through 2.1.1 on all platforms allows attackers to cause a denial of service (crash) via a crafted HD… | ||||