Skip to main content
VulnerabilityPublished Updated

H5FL__blk_gc_list · Hdf5: UNKNOWN READ

Affects hdf5Source GCVE Database

0
Severity
Medium

Rated by Threat Radar

Data as of 30 Jul 2026, 07:29 UTC

What to do

Affected software

ProductAffectedFixed in
OSS-Fuzzhdf5pkg:generic/hdf5Other threatsAffected
  • >=a9036005c3916e6fda0296026323f00d043300f8
  • =snapshot
  • =hdf5-1.14.4.1
  • =snapshot-1.16
  • =final_autotools_develop
  • =2.0.0
  • =hdf5_2.0.0
  • =test-2.0.1-pre1
  • =2.1.0-pre1test
  • =2.1.0
  • =hdf5_2.1.0
  • =2.1.1
  • =2.2.0-rc1
  • =snapshot-2.2.0-rc1
  • =2.2.0
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Until a fix is available, users should consider avoiding the affected versions or applying any vendor-provided workarounds once published.

Description

A vulnerability in the hdf5 library causes an UNKNOWN READ crash in the function H5FL__blk_gc_list, as reported by OSS-Fuzz. The crash occurs during garbage collection routines in the library. This issue affects specific versions of hdf5 including 2.0.0 through 2.2.0. No patch or official fix information is provided in the available data. There are no known exploits in the wild for this vulnerability.

References

Community reviews

Loading reviews…