Approved changes feed: RSS · Atom

cpe:2.3:a:hdfgroup:hdf5:1.10.4:*:*:*:*:*:*:*

part: a version: 1.10.4 update: *

VendorHdfgroup (a546706d-2362-52d3-95ad-3d9c57bef968)
ProductHdf5 (7efe4dab-ecb4-5069-a4ea-8d90fd9e3fe8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:bitbucket/petsc/pkg-hdf5 purl2cpe 2026-06-01 10:15:48.757960
pkg:deb/debian/hdf5 purl2cpe 2026-06-01 10:15:48.757961
pkg:deb/ubuntu/hdf5 purl2cpe 2026-06-01 10:15:48.757962
pkg:github/hdfgroup/hdf5 purl2cpe 2026-06-01 10:15:48.757964
pkg:rpm/fedora/hdf5 purl2cpe 2026-06-01 10:15:48.757965
pkg:rpm/opensuse/hdf5 purl2cpe 2026-06-01 10:15:48.757966

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-26061 vulnerable 2026-06-08 05:41:50.275377 Details available
HIGH (7.8)
A heap-based buffer overflow vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2022-08-22T18:21:43.633Z
Updated: 2024-09-16T23:35:47.966Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25972 vulnerable 2026-06-08 05:41:49.800226 Details available
HIGH (7.8)
An out-of-bounds write vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2022-08-22T18:21:13.690Z
Updated: 2024-09-17T03:48:38.559Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25942 vulnerable 2026-06-08 05:41:49.738913 Details available
HIGH (7.8)
An out-of-bounds read vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2022-08-22T18:20:49.608Z
Updated: 2025-04-15T18:52:22.800Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-18494 vulnerable 2026-06-08 05:20:57.009325 Details available
Buffer Overflow vulnerability in function H5S_close in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file.
Published: 2023-08-22T00:00:00.000Z
Updated: 2024-10-07T15:45:03.262Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-18232 vulnerable 2026-06-08 05:20:56.916718 Details available
Buffer Overflow vulnerability in function H5S_close in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file.
Published: 2023-08-22T00:00:00.000Z
Updated: 2024-10-04T16:42:34.015Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9152 vulnerable 2026-06-08 05:14:25.051930 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9151 vulnerable 2026-06-08 05:14:25.051575 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-8398 vulnerable 2026-06-08 05:14:24.009329 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-8397 vulnerable 2026-06-08 05:14:24.008847 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.