TI-2026-26978 CVE-2026-34734
HDF5: H5T__conv_struct Use After Free
Priority HIGH 69
HDF5 is software for managing data.
RHSA-2026:61630
Red Hat Hardened Images RPMs Security Update
Released 2026-08-31 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Hardened Images hdf5-2.2.0-0.1.1.hum1@aarch64, hdf5-2.2.0-0.1.1.hum1@src, hdf5-2.2.0-0.1.1.hum1@x86_64 +18
Fixes 6 records
TI-2026-15549 CVE-2026-19025 · GHSA-546v-jw2p-gc8p
HDF5 divide-by-zero (SIGFPE) via mismatched chunk-layout dimensionality and dataspace rank on dataset open
Priority MEDIUM 63
H5O__layout_decode in H5Olayout.c in HDF5 through 2.3.0 does not validate that a chunked dataset's stored chunk-layout dimensionality matches its dataspace rank when an existing dataset is opened, whereas this check is p…
TI-2026-21188 CVE-2026-26197
Array full size, element count, and element size are not checked to make sure they match in H5Odtype.c
Priority MEDIUM 60
HDF5 is a high-performance library and a file format specification that implements the HDF5 data model.
TI-2026-14411 CVE-2026-17573 · GHSA-3536-73hp-9xm7
Double Free in H5D__chunk_copy() in HDF5 via a Crafted Chunk-Index Size Field
Priority MEDIUM 52
A double free vulnerability was discovered in the HDF5 library.
TI-2026-14410 CVE-2026-17572 · GHSA-9mx5-fj64-m52r
HDF5 SOHM List Index Heap Buffer Overflow
Priority LOW 24
Heap-based buffer overflow in the SOHM list-index deserialization code in HDF5 through 2.1.1 on all platforms allows attackers to cause a denial of service (crash) via a crafted HDF5 file whose shared-message list index…
TI-2026-62472 CVE-2026-92627 · GHSA-q9w4-8jx2-6xc8
Heap Use-After-Free in H5T__conv_f_f
Priority LOW 21
A heap-use-after-free vulnerability exists in H5T__conv_f_f() in src/H5Tconv.c in HDF5 before 1.14.2.