PT-2026-68347
CVE-2026-19025
·
Published
2026-08-05
·
Updated
2026-09-25
Description by
CVSS 4.0
6.8
MediumMetricsAV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions
HDF5 versions prior to 2.3.1
Description
The
H5O layout decode function in H5Olayout.c fails to validate that a chunked dataset's stored chunk-layout dimensionality matches its dataspace rank when an existing dataset is opened. This validation is only performed during dataset creation. An attacker can trigger a denial of service, resulting in a divide-by-zero error and an application crash within the H5S hyper iter get seq list() function in src/H5Shyper.c, by providing a specially crafted HDF5 file with mismatched chunk and dataspace ranks. This occurs when the file is opened and read using the H5Dopen2 and H5Dread functions, for example, when using the h5repack tool.Recommendations
Update to a version newer than 2.3.0.
Found an issue in the description? Have something to add? Feel free to write us 👾