Skip to main content
VulnerabilityPublished Updated

H5G__node_cmp3 · Hdf5: Heap-buffer-overflow

Affects hdf5Source GCVE Database

0
Severity
Medium

Rated by Threat Radar

Data as of 30 Jul 2026, 07:31 UTC

What to do

Affected software

ProductAffectedFixed in
OSS-Fuzzhdf5pkg:generic/hdf5Other threatsAffected
  • >=f527239564fc27a6e666ce734b88e4ab18765efc
  • =1.14.1
  • =hdf5-1_10_10
  • =hdf5-1_14_1
  • =hdf5-1_14_1-2
  • =snapshot
  • =snapshot-1.14
  • =snapshot-1.12
  • =snapshot-1.10
  • =hdf5-1_14_2
  • =hdf5-1_10_11
  • =hdf5-1_14_3-rc1
  • =hdf5-1_14_3
  • =hdf5-1_12_3
  • =hdf5_1.14.4
  • =hdf5-1.14.4.1
  • =hdf5_1.14.4.1
  • =hdf5_1.14.4.2
  • =temp-1.14.4-3
  • =hdf5_1.14.4.3
  • =hdf5_1.14.5
  • =snapshot-1.16
  • =hdf5-1.14.5
  • =hdf5-1.14.6
  • =hdf5_1.14.6
  • =hdff5-1_14-_0
  • =hdff5-1_14_0
  • =final_autotools_develop
  • =2.0.0
  • =hdf5_2.0.0
  • =test-2.0.1-pre1
  • =2.1.0-pre1test
  • =2.1.0
  • =hdf5_2.1.0
  • =2.1.1
  • =2.2.0-rc1
  • =snapshot-2.2.0-rc1
  • =2.2.0
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Until a patch or official fix is available, users should consider avoiding use of the affected versions or apply any available updates from the vendor. Monitor official hdf5 project channels for updates.

Description

A heap-buffer-overflow vulnerability exists in the H5G__node_cmp3 function of the hdf5 library, as reported by OSS-Fuzz. The issue causes a read overflow on the heap, potentially leading to memory corruption or crashes. Multiple specific versions of hdf5 are affected. No CVSS score or known exploits in the wild have been reported.

References

Community reviews

Loading reviews…