Approved changes feed: RSS · Atom

cpe:2.3:a:hdfgroup:hdf5:1.8.20:*:*:*:*:*:*:*

part: a version: 1.8.20 update: *

VendorHdfgroup (a546706d-2362-52d3-95ad-3d9c57bef968)
ProductHdf5 (7efe4dab-ecb4-5069-a4ea-8d90fd9e3fe8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:bitbucket/petsc/pkg-hdf5 purl2cpe 2026-06-01 10:15:48.758447
pkg:deb/debian/hdf5 purl2cpe 2026-06-01 10:15:48.758449
pkg:deb/ubuntu/hdf5 purl2cpe 2026-06-01 10:15:48.758450
pkg:github/hdfgroup/hdf5 purl2cpe 2026-06-01 10:15:48.758451
pkg:rpm/fedora/hdf5 purl2cpe 2026-06-01 10:15:48.758453
pkg:rpm/opensuse/hdf5 purl2cpe 2026-06-01 10:15:48.758454

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-16438 vulnerable 2026-06-08 05:11:04.853386 Details available
An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in H5L_extern_query at H5Lexternal.c.
Published: 2018-09-04T00:00:00.000Z
Updated: 2024-08-05T10:24:32.643Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14460 vulnerable 2026-06-08 05:10:52.920561 Details available
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_sdspace_decode in H5Osdspace.c.
Published: 2018-07-20T15:00:00.000Z
Updated: 2024-08-05T09:29:51.562Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14035 vulnerable 2026-06-08 05:10:52.616552 Details available
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5VM_memcpyvv in H5VM.c.
Published: 2018-07-13T02:00:00.000Z
Updated: 2024-09-17T01:26:33.295Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14034 vulnerable 2026-06-08 05:10:52.616096 Details available
An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in the function H5O_pline_reset in H5Opline.c.
Published: 2018-07-13T02:00:00.000Z
Updated: 2024-09-17T00:36:02.392Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14033 vulnerable 2026-06-08 05:10:52.615819 Details available
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_layout_decode in H5Olayout.c, related to HDmemcpy.
Published: 2018-07-13T02:00:00.000Z
Updated: 2024-09-16T17:08:43.408Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14031 vulnerable 2026-06-08 05:10:52.615250 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13876 vulnerable 2026-06-08 05:10:52.042703 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13875 vulnerable 2026-06-08 05:10:52.042417 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13874 vulnerable 2026-06-08 05:10:52.042098 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13873 vulnerable 2026-06-08 05:10:52.039438 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13872 vulnerable 2026-06-08 05:10:52.039173 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13871 vulnerable 2026-06-08 05:10:52.038906 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13870 vulnerable 2026-06-08 05:10:52.038639 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13869 vulnerable 2026-06-08 05:10:52.038268 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13868 vulnerable 2026-06-08 05:10:52.037874 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13867 vulnerable 2026-06-08 05:10:52.037581 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13866 vulnerable 2026-06-08 05:10:52.037218 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.