PT-2026-39362 · Julia · Hdf5 Jll

Published

2026-04-29

·

Updated

2026-04-29

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5HG read in H5HG.c (called from H5VL native blob get in H5VLnative blob.c), resulting in the corruption of the instruction pointer.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

JLSEC-2026-316

Affected Products

Hdf5 Jll