Hdf5: Negative-size-param
Affects hdf5Source GCVE Database
Rated by Threat Radar
Data as of 30 Jul 2026, 07:28 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
OSS-Fuzzhdf5pkg:generic/hdf5Other threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Until an official fix is available, users should consider avoiding the affected versions or applying any vendor recommendations once published.
Description
A vulnerability in the hdf5 library involving a negative-size parameter in the H5MM_memcpy function was reported by OSS-Fuzz. The issue causes a crash related to memory copying operations during object link decoding and message iteration. Multiple specific versions of hdf5 are affected, including 1.14.1 and several 2.x pre-release and release versions. No patch or official fix information is currently available.