PT-2026-39387
Published
2026-04-29
·
Updated
2026-04-29
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
A vulnerability has been found in HDF5 up to 1.14.6 and classified as critical. This vulnerability affects the function
H5F addr decode len of the file /hdf5/src/H5Fint.c. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.Exploitability
Fix
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾