Skip to main content
VulnerabilityPublished Updated

Hdf5: Heap-buffer-overflow

Affects hdf5Source GCVE Database

0
Severity
Medium

Rated by Threat Radar

Data as of 30 Jul 2026, 07:28 UTC

What to do

Affected software

ProductAffectedFixed in
OSS-Fuzzhdf5pkg:generic/hdf5Other threatsAffected
  • 1.14.1 – test-2.0.1-pre1
  • >=f527239564fc27a6e666ce734b88e4ab18765efc
37 affected builds		Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Until a fix is available, users should consider avoiding the affected versions or applying any vendor-provided mitigations once published.

Description

A heap-buffer-overflow vulnerability exists in the H5SM_delete function of the hdf5 library. This issue was reported by OSS-Fuzz and involves a read overflow of 4 bytes in heap memory during message deletion operations. The affected versions include 1.14.1, 2.0.0, 2.1.0-pre1test, 2.1.0, 2.1.1, 2.2.0-rc1, and 2.2.0. No public exploits or CVSS score are currently available.

References

Community reviews

Loading reviews…