The HDF Group HDF5

• CVE-2026-120758 Medium 5.4 NULL Pointer Dereference in H5HL_unprotect via Corrupted File 0.1%
• CVE-2026-120757 Medium 6.9 Heap Buffer Over-read via Non-Terminated Link Data in H5L__extern_traverse 0.2%
• CVE-2026-120756 Low 1.9 Heap Buffer Over-read via Malformed Message Size in HDF5's H5O__chunk_deserialize 0.2%
• CVE-2026-120689 Medium 4.3 Uncontrolled Recursion in HDF5 H5B__iterate_helper() via Crafted File 0.2%
• CVE-2026-106547 High 8.5 HDF5 heap buffer overflow in H5VM_array_fill via crafted fill-value metadata 0.2%
• CVE-2026-19029 Medium 6.8 HDF5 scale-offset filter heap buffer over-read via crafted chunk 0.1%
• CVE-2026-92627 Medium 4.6 Heap Use-After-Free in H5T__conv_f_f 0.2%
• CVE-2026-19028 Medium 6.8 HDF5 integer underflow in Fletcher32 filter leads to massive out-of-bounds read 0.2%
• CVE-2026-19027 Medium 6.9 HDF5 out-of-bounds heap read in N-Bit filter decompression 0.2%
• CVE-2026-19026 Medium 6.8 Nbit filter NULL/short parameter-array dereference 0.2%
• CVE-2026-19025 Medium 6.8 HDF5 divide-by-zero (SIGFPE) via mismatched chunk-layout dimensionality and dataspace rank on dataset open 0.2%
• CVE-2026-19024 High 8.2 HDF5 H5Pget_fill_value NULL Pointer Dereference via Malformed Fill Value Message 0.2%
• CVE-2026-19023 Medium 6.8 HDF5 h5dump Untrusted Pointer Dereference in Binary Output of Variable-Length String Datasets 0.2%
• CVE-2026-17574 Medium 5.2 NULL Pointer Dereference in HDF5 via Invalid Variable-Length Datatype Type Tag 0.1%
• CVE-2026-17573 Medium 4.0 Double Free in H5D__chunk_copy() in HDF5 via a Crafted Chunk-Index Size Field 0.2%
• CVE-2026-17572 Medium 5.5 HDF5 SOHM List Index Heap Buffer Overflow 0.1%