PT-2026-39388 · Julia · Hdf5 Jll

Publicado 2026-04-29 · Atualizado 2026-04-29

OSV

A vulnerability, which was classified as problematic, has been found in HDF5 1.14.6. Affected by this issue is the function H5O mtime new encode of the file src/H5Omtime.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

Identificadores relacionados

JLSEC-2026-342

Produtos afetados

Hdf5 Jll

Referências · 6

• https://github.com/HDFGroup/hdf5/issues/5549 · Nota
• https://vuldb.com/?submit.601017 · Nota
• https://vuldb.com/?id.314048 · Nota
• ❌ https://github.com/user-attachments/files/20438441/hdf5_crash_1.txt · Nota, Deleted
• https://osv.dev/vulnerability/JLSEC-2026-342 · Aviso do Fabricante
• https://vuldb.com/?ctiid.314048 · Nota