Skip to main content
VulnerabilityPublished Updated

H5F_addr_encode · Hdf5: Heap-buffer-overflow

Affects hdf5Source GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 30 Jul 2026, 07:32 UTC

What to do

Affected software

ProductAffectedFixed in
OSS-Fuzzhdf5pkg:generic/hdf5Other threatsAffected
  • >=f527239564fc27a6e666ce734b88e4ab18765efc
  • =1.14.1
  • =hdf5-1_10_10
  • =hdf5-1_10_11
  • =hdf5-1_12_3
  • =hdf5-1_14_1
  • =hdf5-1_14_1-2
  • =hdf5-1_14_2
  • =hdf5-1_14_3
  • =hdf5-1_14_3-rc1
  • =hdf5_1.14.4
  • =hdf5_1.14.4.1
  • =hdf5_1.14.4.2
  • =hdf5_1.14.4.3
  • =snapshot
  • =snapshot-1.10
  • =snapshot-1.12
  • =snapshot-1.14
  • =hdf5_1.14.5
  • =snapshot-1.16
  • =hdf5-1.14.5
  • =hdf5-1.14.6
  • =hdf5_1.14.6
  • =hdff5-1_14-_0
  • =hdff5-1_14_0
  • =final_autotools_develop
  • =2.0.0
  • =hdf5_2.0.0
  • =test-2.0.1-pre1
  • =2.1.0-pre1test
  • =2.1.0
  • =hdf5_2.1.0
  • =2.1.1
  • =2.2.0-rc1
  • =snapshot-2.2.0-rc1
  • =2.2.0
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Until an official fix is released, users should consider avoiding the affected versions or applying any available workarounds from the vendor. Monitoring the official hdf5 project and OSS-Fuzz reports for updates is recommended.

Description

A heap-buffer-overflow vulnerability exists in the H5F_addr_encode function of the hdf5 library, as reported by OSS-Fuzz. The issue causes a write overflow on the heap, potentially leading to memory corruption. Multiple specific versions of hdf5 are affected. No official patch or remediation information is provided in the available data.

References

Community reviews

Loading reviews…