CVE-2026-19025: CWE-369 Divide by zero in The HDF Group HDF5
A divide-by-zero vulnerability exists in HDF5 through version 2.3.0 due to improper validation of chunked dataset dimensionality when opening an existing dataset. This flaw can cause application crashes via specially crafted HDF5 files that mismatch chunk layout and dataspace ranks.
AI Analysis
Technical Summary
The vulnerability (CVE-2026-19025) occurs in the H5O__layout_decode function within H5Olayout.c of the HDF5 library up to version 2.3.0. It fails to verify that the dimensionality of a chunked dataset's stored chunk layout matches the dataspace rank when opening an existing dataset, a check only performed at dataset creation time. This can lead to a divide-by-zero error and subsequent crash in the H5S__hyper_iter_get_seq_list function in src/H5Shyper.c when reading the dataset via H5Dopen2 and H5Dread, for example using the h5repack tool with a crafted file.
Potential Impact
An attacker can cause a denial of service by triggering a divide-by-zero error that crashes applications using vulnerable versions of HDF5 when they open and read maliciously crafted HDF5 files. There is no indication of code execution or data corruption beyond the crash.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid opening untrusted or crafted HDF5 files that could exploit this vulnerability.
CVE-2026-19025: CWE-369 Divide by zero in The HDF Group HDF5
Description
A divide-by-zero vulnerability exists in HDF5 through version 2.3.0 due to improper validation of chunked dataset dimensionality when opening an existing dataset. This flaw can cause application crashes via specially crafted HDF5 files that mismatch chunk layout and dataspace ranks.
CVSS v4.0
Score 6.8medium
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability (CVE-2026-19025) occurs in the H5O__layout_decode function within H5Olayout.c of the HDF5 library up to version 2.3.0. It fails to verify that the dimensionality of a chunked dataset's stored chunk layout matches the dataspace rank when opening an existing dataset, a check only performed at dataset creation time. This can lead to a divide-by-zero error and subsequent crash in the H5S__hyper_iter_get_seq_list function in src/H5Shyper.c when reading the dataset via H5Dopen2 and H5Dread, for example using the h5repack tool with a crafted file.
Potential Impact
An attacker can cause a denial of service by triggering a divide-by-zero error that crashes applications using vulnerable versions of HDF5 when they open and read maliciously crafted HDF5 files. There is no indication of code execution or data corruption beyond the crash.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid opening untrusted or crafted HDF5 files that could exploit this vulnerability.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- HDFG
- Date Reserved
- 2026-08-05T22:14:38.816Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a73bfadbf8831d53994ed45
Added to database: 08/05/2026, 22:56:45 UTC
Last enriched: 08/05/2026, 23:16:24 UTC
Last updated: 08/05/2026, 23:20:32 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.