Heap Buffer Overflow Vulnerability in HDF5 Software by HDF Group

CVE-2026-26200

What is CVE-2026-26200?

Prior to version 1.14.4-2, HDF5 software is susceptible to a heap buffer overflow when processing malicious h5 files. If an attacker gains the ability to manipulate an h5 file, it can result in a write-based overflow, potentially leading to a denial-of-service scenario. Although the exploitability for remote code execution remains uncertain due to various factors, immediate upgrades to patched versions are recommended to safeguard against this issue.

References