7.8
Élevée
CVE-2026-26200 HDF5 is software for managing data
Description
HDF5 is software for managing data. Prior to version 1.14.4-2, an attacker who can control an `h5` file parsed by HDF5 can trigger a write-based heap buffer overflow condition. This can lead to a denial-of-service condition, and potentially further issues such as remote code execution depending on the practical exploitability of the heap overflow against modern operating systems. Real-world exploitability of this issue in terms of remote-code execution is currently unknown. Version 1.14.4-2 fixes the issue.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat Enterprise Linux AI (RHEL AI) 3 | Versions non publiées | |
| hdf5 1.14 | premières → < 1.14.4-2 | 1.14.4-2 |
Références
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Red Hat Enterprise Linux AI (RHEL AI) 3
Les 145 CVE de Red Hat Enterprise Linux AI (RHEL AI) 3 →
CVE-2026-114406
Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns
6.8
Moyenne
CVE-2026-96889
Librsvg: use-after-free when xml includes have duplicated entities
7.8
Élevée
CVE-2026-87742
A flaw was found in quarkus-websockets-next
7.5
Élevée
CVE-2026-92925
Redis: redis: out-of-bounds read via crafted cluster bus packets
7.1
Élevée