PT-2026-39386 · Julia · Hdf5 Jll

Publicado 2026-04-29 · Atualizado 2026-04-29

OSV

A vulnerability, which was classified as critical, has been found in HDF5 up to 1.14.6. Affected by this issue is the function H5FS sect find node of the file H5FSsection.c. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.

Identificadores relacionados

JLSEC-2026-340

Produtos afetados

Hdf5 Jll

Referências · 6

• https://github.com/HDFGroup/hdf5/issues/5580 · Nota
• https://osv.dev/vulnerability/JLSEC-2026-340 · Aviso do Fabricante
• https://vuldb.com/?ctiid.313274 · Nota
• https://vuldb.com/?id.313274 · Nota
• https://vuldb.com/?submit.592588 · Nota
• ❌ https://github.com/user-attachments/files/20626642/reproduce.tar.gz · Nota, Deleted