PT-2026-68347 · Hdf5 · Hdf5
CVE-2026-19025
·
Published
2026-08-05
·
Updated
2026-08-06
CVSS v4.0
6.8
Medium
| Vector | AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Name of the Vulnerable Software and Affected Versions
HDF5 versions prior to 2.3.1
Description
The
H5O layout decode function in H5Olayout.c fails to validate that a chunked dataset's stored chunk-layout dimensionality matches its dataspace rank when an existing dataset is opened. This validation is only performed during dataset creation. An attacker can trigger a denial of service, resulting in a divide-by-zero error and an application crash within the H5S hyper iter get seq list() function in src/H5Shyper.c, by providing a specially crafted HDF5 file with mismatched chunk and dataspace ranks. This occurs when the file is opened and read using the H5Dopen2 and H5Dread functions, for example, when using the h5repack tool.Recommendations
Update to a version newer than 2.3.0.
Exploit
Fix
DoS
Divide By Zero
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Hdf5