7.8
High
CVE-2026-26200 HDF5 is software for managing data
Description
HDF5 is software for managing data. Prior to version 1.14.4-2, an attacker who can control an `h5` file parsed by HDF5 can trigger a write-based heap buffer overflow condition. This can lead to a denial-of-service condition, and potentially further issues such as remote code execution depending on the practical exploitability of the heap overflow against modern operating systems. Real-world exploitability of this issue in terms of remote-code execution is currently unknown. Version 1.14.4-2 fixes the issue.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux AI (RHEL AI) 3 | Versions not published | |
| hdf5 1.14 | earliest → < 1.14.4-2 | 1.14.4-2 |
References
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of Red Hat Enterprise Linux AI (RHEL AI) 3
The 145 CVEs of Red Hat Enterprise Linux AI (RHEL AI) 3 →
CVE-2026-114406
Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns
6.8
Medium
CVE-2026-96889
Librsvg: use-after-free when xml includes have duplicated entities
7.8
High
CVE-2026-87742
A flaw was found in quarkus-websockets-next
7.5
High
CVE-2026-92925
Redis: redis: out-of-bounds read via crafted cluster bus packets
7.1
High