PT-2026-39374 · Julia · Hdf5 Jll
Published
2026-04-29
·
Updated
2026-04-29
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
A vulnerability was found in HDF5 1.14.6 and classified as critical. This issue affects the function H5MM strndup of the component Metadata Attribute Decoder. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The vendor plans to fix this issue in an upcoming release.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Hdf5 Jll