Skip to content
fr Sign in
5.5 Medium

CVE-2026-29043 HDF5 is software for managing data

Description

HDF5 is software for managing data. In 1.14.1-2 and earlier, an attacker who can control an h5 file parsed by HDF5 can trigger a write-based heap buffer overflow condition in the H5T__ref_mem_setnull method. This can lead to a denial-of-service condition, and potentially further issues such as remote code execution depending on the practical exploitability of the heap overflow against modern operating systems.

Affected products and versions

Product Affected versions Fixed in
hdf5 1.14 earliest → 1.14.1-2 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of hdf5

The 32 CVEs of hdf5 →
CVE-2026-26199 HDF5 is a high-performance library and a file format specification that implements the HDF5 data model 5.9 Medium CVE-2026-26197 HDF5 is a high-performance library and a file format specification that implements the HDF5 data model 5.9 Medium CVE-2026-34734 HDF5 is software for managing data 7.8 High CVE-2026-26200 HDF5 is software for managing data 7.8 High
Track this CVE