TH
Vendor security profile
The HDF Group
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs9
Critical0
CISA KEV0
Public exploit6
Patch rate%0
Avg. CVSS6.9
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
6
1
2
CVE KEV
CVE severity distribution
9toplam CVE
High2 (22%)
Medium7 (78%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%67
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
9Unknown
Latest vulnerabilities
8.5
CVE-2026-106547
HDF5 heap buffer overflow in H5VM_array_fill via crafted fill-value metadata
TH
Patch status unknownEPSS %0
6.8
CVE-2026-19029
HDF5 scale-offset filter heap buffer over-read via crafted chunk
TH
Patch status unknownEPSS %0
4.6
CVE-2026-92627
Heap Use-After-Free in H5T__conv_f_f
TH
Patch status unknownEPSS %0
6.8
CVE-2026-19028
HDF5 integer underflow in Fletcher32 filter leads to massive out-of-bounds read
TH
Patch status unknownEPSS %0
6.9
CVE-2026-19027
HDF5 out-of-bounds heap read in N-Bit filter decompression
TH
Patch status unknownEPSS %0
6.8
CVE-2026-19026
Nbit filter NULL/short parameter-array dereference
TH
Patch status unknownEPSS %0
6.8
CVE-2026-19025
HDF5 divide-by-zero (SIGFPE) via mismatched chunk-layout dimensionality and dataspace rank on dataset open
TH
Patch status unknownEPSS %0
8.2
CVE-2026-19024
HDF5 H5Pget_fill_value NULL Pointer Dereference via Malformed Fill Value Message
TH
Patch status unknownEPSS %0
6.8
CVE-2026-19023
HDF5 h5dump Untrusted Pointer Dereference in Binary Output of Variable-Length String Datasets
TH
Patch status unknownEPSS %0