PT-2026-39372 · Julia · Hdf5 Jll

Publicado 2026-04-29 · Atualizado 2026-04-29

OSV

A vulnerability, which was classified as critical, was found in HDF5 1.14.6. This affects the function H5Z scaleoffset decompress one byte of the component Scale-Offset Filter. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The vendor plans to fix this issue in an upcoming release.

Exploit

Identificadores relacionados

JLSEC-2026-326

Produtos afetados

Hdf5 Jll

Referências · 5

• 🔥 https://github.com/madao123123/crash_report/blob/main/hdf5_poc/hdf5_poc2.md · Exploit
• https://vuldb.com/?id.299721 · Nota
• https://osv.dev/vulnerability/JLSEC-2026-326 · Aviso do Fabricante
• https://vuldb.com/?submit.514531 · Nota
• https://vuldb.com/?ctiid.299721 · Nota