Skip to content
5.9 Medium

CVE-2026-26199 HDF5 is a high-performance library and a file format specification that implements the HDF5 data model

Description

HDF5 is a high-performance library and a file format specification that implements the HDF5 data model. If `H5Iget_name` is invoked on a group id with `0` for the size parameter, it will underflow when trying to place a null terminator in the buffer. This can occur if `H5Iget_name` is invoked in a way where `size` can be forced to zero, and there is important data before the `name` buffer.

Affected products and versions

Product Affected versions Fixed in
hdf5 1.14 earliest → 1.14.6 No fix stated

References

Timeline

  1. Published
  2. Last modified
The 32 CVEs of hdf5 →
Track this CVE