--- title: "HDFGroup vulnerabilities: CVEs, CISA KEV and security advisories" url: https://radicalnotion.ai/vendor/hdfgroup type: vendor description: "HDFGroup has 151 published CVEs, 0 in CISA KEV and 106 with public exploits." updated: 2026-11-03 source: RadicalNotion.AI license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/) --- # HDFGroup vulnerabilities - **Published CVEs:** 151 - **In CISA KEV:** 0 - **With a public exploit:** 106 - **With a patch:** 129 - **Average CVSS:** 7.0 - **CVEs in the last two years:** 50 - **First CVE:** 2016-11-18 - **Latest CVE:** 2026-11-03 ## Severity breakdown | Severity | CVEs | | --- | --- | | Critical | 19 | | High | 49 | | Medium | 80 | | Low | 3 | | Unscored | 0 | ## Most affected products | Product | CVEs | | --- | --- | | [HDF5](https://radicalnotion.ai/vendor/hdfgroup/hdf5) | 151 | | [HDF5 1.14.6](https://radicalnotion.ai/vendor/hdfgroup/hdf5-1-14-6) | 1 | | [Scale-Offset Filter](https://radicalnotion.ai/vendor/hdfgroup/scale-offset-filter) | 1 | | [Szip Filter](https://radicalnotion.ai/vendor/hdfgroup/szip-filter) | 1 | ## Most common weakness types | CWE | Name | CVEs | | --- | --- | --- | | [CWE-122](https://radicalnotion.ai/cwe/cwe-122) | Heap-based Buffer Overflow | 43 | | [CWE-125](https://radicalnotion.ai/cwe/cwe-125) | Out-of-bounds Read | 33 | | [CWE-787](https://radicalnotion.ai/cwe/cwe-787) | Out-of-bounds Write | 18 | | [CWE-476](https://radicalnotion.ai/cwe/cwe-476) | NULL Pointer Dereference | 12 | | [CWE-369](https://radicalnotion.ai/cwe/cwe-369) | Divide By Zero | 9 | | [CWE-416](https://radicalnotion.ai/cwe/cwe-416) | Use After Free | 6 | | [CWE-120](https://radicalnotion.ai/cwe/cwe-120) | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') | 5 | | [CWE-119](https://radicalnotion.ai/cwe/cwe-119) | Improper Restriction of Operations within the Bounds of a Memory Buffer | 4 | ## Assigning CNAs | CNA | CVEs | | --- | --- | | [mitre](https://radicalnotion.ai/cna/mitre) | 96 | | [VulDB](https://radicalnotion.ai/cna/vuldb) | 25 | | [HDFG](https://radicalnotion.ai/cna/hdfg) | 18 | | [GitHub\_M](https://radicalnotion.ai/cna/github-m) | 5 | | [certcc](https://radicalnotion.ai/cna/certcc) | 4 | | [talos](https://radicalnotion.ai/cna/talos) | 3 | ## CVEs by year | Year | CVEs published | | --- | --- | | 2019 | 5 | | 2020 | 4 | | 2021 | 0 | | 2022 | 10 | | 2023 | 3 | | 2024 | 35 | | 2025 | 27 | | 2026 | 23 | ## Latest CVEs | CVE | Title | Severity | CVSS | EPSS | CISA KEV | Published | | --- | --- | --- | --- | --- | --- | --- | | CVE-2026-120758 | NULL Pointer Dereference in H5HL\_unprotect via Corrupted File | medium | 5.4 | 0.1% | No | 2026-11-03 | | CVE-2026-120757 | Heap Buffer Over-read via Non-Terminated Link Data in H5L\_\_extern\_traverse | medium | 6.9 | 0.2% | No | 2026-11-03 | | CVE-2026-120756 | Heap Buffer Over-read via Malformed Message Size in HDF5's H5O\_\_chunk\_deserialize | low | 1.9 | 0.2% | No | 2026-11-03 | | CVE-2026-120755 | Integer Underflow Leads to Out-of-Bounds Read via Truncated Chunk in HDF5 Szip Filter | medium | 4.7 | 0.1% | No | 2026-11-03 | | CVE-2026-120754 | Uninitialized Heap Memory Disclosure via Truncated Chunk in HDF5 Scale-Offset Filter | low | 1.9 | 0.1% | No | 2026-11-03 | | CVE-2026-120689 | Uncontrolled Recursion in HDF5 H5B\_\_iterate\_helper() via Crafted File | medium | 4.3 | 0.2% | No | 2026-11-02 | | CVE-2026-106547 | HDF5 heap buffer overflow in H5VM\_array\_fill via crafted fill-value metadata | high | 8.5 | 0.2% | No | 2026-10-06 | | CVE-2026-19029 | HDF5 scale-offset filter heap buffer over-read via crafted chunk | medium | 6.8 | 0.1% | No | 2026-10-06 | | CVE-2026-92627 | Heap Use-After-Free in H5T\_\_conv\_f\_f | medium | 4.6 | 0.2% | No | 2026-09-16 | | CVE-2026-19028 | HDF5 integer underflow in Fletcher32 filter leads to massive out-of-bounds read | medium | 6.8 | 0.2% | No | 2026-08-05 | | CVE-2026-19027 | HDF5 out-of-bounds heap read in N-Bit filter decompression | medium | 6.9 | 0.2% | No | 2026-08-05 | | CVE-2026-19026 | Nbit filter NULL/short parameter-array dereference | medium | 6.8 | 0.2% | No | 2026-08-05 | ## Frequently asked questions ### How many CVEs does HDFGroup have? HDFGroup has 151 published CVE records since 2016, including 50 in the last two years. ### How many HDFGroup CVEs are in CISA KEV? None of HDFGroup's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog. ### Which HDFGroup products have the most CVEs? The HDFGroup products with the most published CVEs are HDF5, HDF5 1.14.6, Scale-Offset Filter, Szip Filter. ### What are the most common weakness types in HDFGroup CVEs? HDFGroup's CVEs most often map to these CWE weakness types: CWE-122 (Heap-based Buffer Overflow), CWE-125 (Out-of-bounds Read), CWE-787 (Out-of-bounds Write), CWE-476 (NULL Pointer Dereference). ### Are there public exploits for HDFGroup vulnerabilities? Yes — 106 of HDFGroup's CVEs have a known public exploit. ### How many critical HDFGroup vulnerabilities are there? HDFGroup has 19 critical and 49 high-severity CVEs. ### What is the average severity of HDFGroup CVEs? The average CVSS base score across HDFGroup's scored CVEs is 7.0. ## Related vendors - [Mitel](https://radicalnotion.ai/vendor/mitel) (153 CVEs) - [Squid Cache](https://radicalnotion.ai/vendor/squid-cache) (153 CVEs) - [10Web](https://radicalnotion.ai/vendor/10web) (152 CVEs) - [FlowiseAI](https://radicalnotion.ai/vendor/flowiseai) (152 CVEs) - [Check Point](https://radicalnotion.ai/vendor/checkpoint) (151 CVEs) - [Ruby on Rails](https://radicalnotion.ai/vendor/rubyonrails) (151 CVEs) - [mandrakesoft](https://radicalnotion.ai/vendor/mandrakesoft) (151 CVEs) - [symfony](https://radicalnotion.ai/vendor/symfony) (150 CVEs) --- Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/hdfgroup). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.