CVE-2026-26200: falha de alta gravidade em HDFGroup hdf5
HDF5 Affected by H5T__conv_struct_opt Heap Buffer Overflow
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.8epss 0.4%
HDF5 is software for managing data. Prior to version 1.14.4-2, an attacker who can control an `h5` file parsed by HDF5 can trigger a write-based heap buffer overflow condition. This can lead to a denial-of-service condition, and potentially further issues such as remote code execution depending on the practical exploitability of the heap overflow against modern operating systems. Real-world exploitability of this issue in terms of remote-code execution is currently unknown. Version 1.14.4-2 fixes the issue.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Produtos afetados
HDFGroup · hdf5CVEs relacionadas — HDFGroup hdf5
No mesmo produto, das mais perigosas para as menos.
CVE-2026-26197MEDIUMArray full size, element count, and element size are not checked to make sure they match in H5Odtype.cEPSS 0.4%CVE-2026-26199MEDIUMBuffer underflow in `H5Iget_name `/`H5G_get_name` if size is zeroEPSS 0.4%CVE-2026-29043MEDIUMHDF5 H5T__ref_mem_setnull Heap Buffer OverflowEPSS 0.2%CVE-2026-34734HIGHHDF5: H5T__conv_struct Use After FreeEPSS 0.2%