https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T20:57:53.984999+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-17573 fkie_cve-2026-17573 2026-10-01T20:57:53.996708+00:00

A double free vulnerability was discovered in the HDF5 library. Processing a crafted HDF5 file containing an oversized chunk size field via h5repack may cause the application to abort due to a double free.

 https://vulnerability.circl.lu/vuln/ghsa-3536-73hp-9xm7 GHSA-3536-73hp-9xm7 2026-10-01T20:57:53.996816+00:00

A double free vulnerability was discovered in the HDF5 library. Processing a crafted HDF5 file containing an oversized chunk size field via h5repack may cause the application to abort due to a double free.

 https://vulnerability.circl.lu/vuln/oesa-2026-3259 OESA-2026-3259 — hdf5 security update 2026-10-01T20:57:53.996852+00:00

Affected: openEuler:22.03-LTS-SP4: hdf5

HDF5 is a data model, library, and file format for storing and managing data. It supports an unlimited variety of datatypes, and is designed for flexible and efficient I/O and for high volume and complex data. HDF5 is portable and is extensible, allowing applications to evolve in their use of HDF5. The HDF5 Technology suite includes tools and applications for managing, manipulating, viewing, and analyzing data in the HDF5 format. Security Fix(es):

Heap-based buffer overflow in the SOHM list-index deserialization code in HDF5 through 2.1.1 on all platforms allows attackers to cause a denial of service (crash) via a crafted HDF5 file whose shared-message list index declares a num_messages count exceeding list_max, triggering out-of-bounds heap reads and writes in H5SM__cache_list_deserialize and H5SM__cache_list_verify_chksum.(CVE-2026-17572)

A double free vulnerability was discovered in the HDF5 library. Processing a crafted HDF5 file containing an oversized chunk size field via h5repack may cause the application to abort due to a double free.(CVE-2026-17573)

HDF5 contains a NULL pointer dereference vulnerability. Processing a crafted HDF5 file containing an attribute with an invalid variable-length datatype type field may cause the application to crash when the attribute is read.(CVE-2026-17574)

HDF5 is a high-performance library and a file format specification that implements the HDF5 data model. If a file is corrupted such that an array datatype's size, the num…

 https://vulnerability.circl.lu/vuln/rhsa-2026:61630 RHSA-2026:61630 — Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update 2026-10-01T20:57:53.996959+00:00

hdf5: HDF5: Denial of Service via crafted file requiring user interaction hdf5: HDF5 library: Denial of Service via crafted HDF5 file processing hdf5: HDF5: Denial of Service due to malformed chunk data in files hdf5: HDF5: Out-of-bounds read due to corrupted file can lead to denial of service hdf5: HDF5 h5dump: Arbitrary code execution via a crafted HDF5 file HDF5: HDF5: Memory corruption via crafted HDF5 file

 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-17573 UBUNTU-CVE-2026-17573 2026-10-01T20:57:53.997011+00:00

Affected: Ubuntu:Pro:14.04:LTS: hdf5, Ubuntu:Pro:16.04:LTS: hdf5, Ubuntu:Pro:18.04:LTS: hdf5, Ubuntu:Pro:20.04:LTS: hdf5, Ubuntu:22.04:LTS: hdf5, Ubuntu:24.04:LTS: hdf5, Ubuntu:26.04:LTS: hdf5

A double free vulnerability was discovered in the HDF5 library. Processing a crafted HDF5 file containing an oversized chunk size field via h5repack may cause the application to abort due to a double free.