Hdf5
Vendor:
First CVE: Nov 18, 2016 · Active for 9 years
131
Total CVEs
More Total CVEs than 99% of tracked products
13.1
Avg CVEs / Year
Higher CVE frequency than 98% of tracked products
7.3
Avg CVSS
Higher Avg CVSS than 50% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Hdf5 over time
Volume of CVEsAvg CVSS Base Score
First CVE
Nov 18, 2016
9 years ago
Most Recent CVE
Apr 10, 2026
108 days ago
CVE Severity & Scoring
Hdf5131 CVEs
40%
42%
15%
All CVEs352,785 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local60 (45.8%)
Network71 (54.2%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low112 (85.5%)
High19 (14.5%)
Unknown0 (0.0%)
User Interaction
None70 (53.4%)
Unknown0 (0.0%)
Required61 (46.6%)
Privileges Required
Low30 (22.9%)
High0 (0.0%)
None101 (77.1%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (131 CVEs).
131 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2018-13872CRITICAL An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer overflow in the function H5G_ent_decode in H5Gent.c. | Jul 10, 2018 | 9.8 | 31 | NO | NO |
CVE-2018-13870CRITICAL An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_link_decode in H5Olink.c. | Jul 10, 2018 | 9.8 | 31 | NO | NO |
CVE-2018-13869CRITICAL An issue was discovered in the HDF HDF5 1.8.20 library. There is a memcpy parameter overlap in the function H5O_link_decode in H5Olink.c. | Jul 10, 2018 | 9.8 | 31 | NO | NO |
CVE-2018-13868CRITICAL An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_fill_old_decode in H5Ofill.c. | Jul 10, 2018 | 9.8 | 31 | NO | NO |
CVE-2018-13874CRITICAL An issue was discovered in the HDF HDF5 1.8.20 library. There is a stack-based buffer overflow in the function H5FD_sec2_read in H5FDsec2.c, related to HDmemset. | Jul 10, 2018 | 9.8 | 30 | NO | NO |
CVE-2018-13873CRITICAL An issue was discovered in the HDF HDF5 1.8.20 library. There is a buffer over-read in H5O_chunk_deserialize in H5Ocache.c. | Jul 10, 2018 | 9.8 | 30 | NO | NO |
CVE-2018-13871CRITICAL An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer overflow in the function H5FL_blk_malloc in H5FL.c. | Jul 10, 2018 | 9.8 | 30 | NO | NO |
CVE-2026-34734HIGH HDF5 is software for managing data. In 1.14.1-2 and earlier, a heap-use-after-free was found in the h5dump helper utility. An attacker who can supply a malicious h5 file can trigge | Apr 9, 2026 | 7.8 | 29 | NO | NO |
CVE-2018-13867CRITICAL An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in the function H5F__accum_read in H5Faccum.c. | Jul 10, 2018 | 9.8 | 29 | NO | NO |
CVE-2021-46242HIGH HDF5 v1.13.1-1 was discovered to contain a heap-use-after free via the component H5AC_unpin_entry. | Jan 21, 2022 | 8.8 | 28 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (131 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (131 CVEs).
Media Mentions
Signals from CVEs in this product scope (131 CVEs).
Top CNAs Publishing CVEs For Hdf5
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 1.8.20 | 16 | 9.3 | 1.7% | 0 | 0 |
| 1.8.16 | 4 | 8.6 | 0.8% | 0 | 0 |
| 1.14.6 | 16 | 6.5 | 0.3% | 0 | 0 |
| 1.13.1-1 | 7 | 6.3 | 0.8% | 0 | 0 |
| 1.10.4 | 9 | 8.0 | 1.0% | 0 | 0 |
| 1.10.3 | 1 | 6.5 | 1.3% | 0 | 0 |
| 1.10.2 | 7 | 7.0 | 2.0% | 0 | 0 |
| 1.10.1 | 4 | 7.1 | 1.3% | 0 | 0 |