CVE-2026-17573mediumCWE-415

CVE-2026-17573: falha de média gravidade em The HDF Group HDF5

Double Free in H5D__chunk_copy() in HDF5 via a Crafted Chunk-Index Size Field

Publicada em

Seguir esta CVE+ Monitorar HDF5+ Monitorar hdf5

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4epss 0.2%
A double free vulnerability was discovered in the HDF5 library. Processing a crafted HDF5 file containing an oversized chunk size field via h5repack may cause the application to abort due to a double free.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U
Produtos afetados
The HDF Group · HDF5
CVEs relacionadas — The HDF Group HDF5

No mesmo produto, das mais perigosas para as menos.

CVE-2026-92627MEDIUMHeap Use-After-Free in H5T__conv_f_fEPSS 0.2%CVE-2026-19028MEDIUMHDF5 integer underflow in Fletcher32 filter leads to massive out-of-bounds readEPSS 0.2%CVE-2026-19027MEDIUMHDF5 out-of-bounds heap read in N-Bit filter decompressionEPSS 0.2%CVE-2026-19026MEDIUMNbit filter NULL/short parameter-array dereferenceEPSS 0.2%CVE-2026-19024HIGHHDF5 H5Pget_fill_value NULL Pointer Dereference via Malformed Fill Value MessageEPSS 0.2%CVE-2026-120756LOWHeap Buffer Over-read via Malformed Message Size in HDF5's H5O__chunk_deserializeEPSS 0.2%