CVE-2026-26197

Name of the Vulnerable Software and Affected Versions HDF5 (affected versions not specified)

Description An out-of-bounds read can occur when processing a maliciously corrupted file where an array datatype's full size, number of elements, and element size are inconsistent. Specifically, the library stores the full size in dt->shared->size, the number of elements in dt->shared->u.array.nelem, and the element size in dt->shared->parent->shared->size. If these values do not align (element size * nelem = full size), it triggers the read error. This issue only affects files that have been intentionally altered by a malicious actor and does not occur during regular usage.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.