PT-2026-39374 · Julia · Hdf5 Jll

Publicado 2026-04-29 · Atualizado 2026-04-29

OSV

A vulnerability was found in HDF5 1.14.6 and classified as critical. This issue affects the function H5MM strndup of the component Metadata Attribute Decoder. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The vendor plans to fix this issue in an upcoming release.

Exploit

Identificadores relacionados

JLSEC-2026-328

Produtos afetados

Hdf5 Jll

Referências · 5

• 🔥 https://github.com/madao123123/crash_report/blob/main/hdf5_poc/hdf5_poc4.md · Exploit
• https://vuldb.com/?ctiid.299723 · Nota
• https://vuldb.com/?id.299723 · Nota
• https://vuldb.com/?submit.514533 · Nota
• https://osv.dev/vulnerability/JLSEC-2026-328 · Aviso do Fabricante