Multiple security vulnerabilities have been identified in HDF5 before version 2.3.0, including untrusted pointer dereference, NULL pointer dereference, out-of-bounds heap read, and size_t underflow. These flaws can lead to denial of service or memory disclosure when processing crafted HDF5 files with specific characteristics. The issues affect tools such as h5dump, h5ls, and h5repack. A high severity CVSS 8.2 score reflects the significant impact of these vulnerabilities. Fixed versions are available starting from 1.14.5-8.oe2403sp3.