Hdf5: Heap-buffer-overflow
Affects hdf5Source GCVE Database
Rated by Threat Radar
Data as of 30 Jul 2026, 07:23 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
OSS-Fuzzhdf5pkg:generic/hdf5Other threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Until an official fix is available, users should monitor vendor communications and consider applying any updates once released. No specific mitigations are provided by the vendor or OSS-Fuzz at this time.
Description
A heap-buffer-overflow vulnerability exists in the H5O__mtime_new_encode function of the hdf5 library, as reported by OSS-Fuzz. This vulnerability causes a write overflow on the heap, potentially leading to memory corruption. Multiple specific versions of hdf5 are affected. No CVSS score or vendor patch information is currently available.