CVE-2026-34734

Name of the Vulnerable Software and Affected Versions HDF5 versions 1.14.1-2 and earlier

Description HDF5 is software for managing data. A heap-use-after-free issue was identified in the h5dump helper utility. An attacker can trigger this by providing a malicious h5 file. The issue occurs because a freed object is referenced in a memmove call from H5T conv struct. The object was allocated by H5D typeinfo init phase3 and freed by H5D typeinfo term.

Recommendations Update to a version later than 1.14.1-2