Skip to main content
VulnerabilityPublished Updated

H5FS__sect_link · Hdf5: Heap-buffer-overflow

Affects hdf5Source GCVE Database

0
Severity
Medium

Rated by Threat Radar

Data as of 30 Jul 2026, 07:19 UTC

What to do

Affected software

ProductAffectedFixed in
OSS-Fuzzhdf5pkg:generic/hdf5Other threatsAffected
  • >=f527239564fc27a6e666ce734b88e4ab18765efc
  • =1.14.1
  • =hdf5-1_10_10
  • =hdf5-1_14_1
  • =hdf5-1_14_1-2
  • =snapshot
  • =snapshot-1.10
  • =snapshot-1.12
  • =snapshot-1.14
  • =hdf5-1_14_2
  • =hdf5-1_10_11
  • =hdf5-1_14_3-rc1
  • =hdf5-1_14_3
  • =hdf5-1_12_3
  • =hdf5-1.14.4.1
  • =hdf5_1.14.4
  • =hdf5_1.14.4.1
  • =hdf5_1.14.4.2
  • =temp-1.14.4-3
  • =hdf5_1.14.4.3
  • =hdf5_1.14.5
  • =snapshot-1.16
  • =hdf5-1.14.5
  • =hdf5-1.14.6
  • =hdf5_1.14.6
  • =hdff5-1_14-_0
  • =hdff5-1_14_0
  • =final_autotools_develop
  • =2.0.0
  • =hdf5_2.0.0
  • =test-2.0.1-pre1
  • =2.1.0-pre1test
  • =2.1.0
  • =hdf5_2.1.0
  • =2.1.1
  • =2.2.0-rc1
  • =snapshot-2.2.0-rc1
  • =2.2.0
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Until an official fix is released, users should consider avoiding use of the affected versions or apply any available OSS-Fuzz or community patches if available. Monitor official hdf5 project communications for updates.

Description

A heap-buffer-overflow vulnerability exists in the H5FS__sect_link function of the hdf5 library, as reported by OSS-Fuzz. This vulnerability involves an out-of-bounds read of 8 bytes on the heap. Multiple specific versions of hdf5 are affected, including 1.14.1, 2.0.0, 2.1.0-pre1test, 2.1.0, 2.1.1, 2.2.0-rc1, and 2.2.0. No CVSS score or vendor patch information is provided, and no known exploits in the wild have been reported.

References

Community reviews

Loading reviews…