https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 21 Oct 2026 15:51:46 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-106547 <p>A heap-based buffer overflow in H5VM_array_fill() in src/H5VM.c in HDF5 before 2.2.0 lets a remote attacker cause an application crash and possibly execute arbitrary code with a crafted HDF5 file. When a dataset&#39;s unallocated chunks are read, H5D__fill_init() fills the fill-value buffer from datatype and dataspace metadata in the file. If that metadata is inconsistent with the buffer&#39;s allocated size, the write goes past the end of the buffer. The attacker can control the content written through the fill value stored in the file.</p> <p>A heap-based buffer overflow in H5VM_array_fill() in src/H5VM.c in HDF5 before 2.2.0 lets a remote attacker cause an application crash and possibly execute arbitrary code with a crafted HDF5 file. When a dataset&#39;s unallocated chunks are read, H5D__fill_init() fills the fill-value buffer from datatype and dataspace metadata in the file. If that metadata is inconsistent with the buffer&#39;s allocated size, the write goes past the end of the buffer. The attacker can control the content written through the fill value stored in the file.</p> https://db.gcve.eu/vuln/fkie_cve-2026-106547 https://db.gcve.eu/vuln/ghsa-p24g-8x6r-2v93 <p>A heap-based buffer overflow in H5VM_array_fill() in src/H5VM.c in HDF5 before 2.2.0 lets a remote attacker cause an application crash and possibly execute arbitrary code with a crafted HDF5 file. When a dataset&#39;s unallocated chunks are read, H5D__fill_init() fills the fill-value buffer from datatype and dataspace metadata in the file. If that metadata is inconsistent with the buffer&#39;s allocated size, the write goes past the end of the buffer. The attacker can control the content written through the fill value stored in the file.</p> <p>A heap-based buffer overflow in H5VM_array_fill() in src/H5VM.c in HDF5 before 2.2.0 lets a remote attacker cause an application crash and possibly execute arbitrary code with a crafted HDF5 file. When a dataset&#39;s unallocated chunks are read, H5D__fill_init() fills the fill-value buffer from datatype and dataspace metadata in the file. If that metadata is inconsistent with the buffer&#39;s allocated size, the write goes past the end of the buffer. The attacker can control the content written through the fill value stored in the file.</p> https://db.gcve.eu/vuln/ghsa-p24g-8x6r-2v93 https://db.gcve.eu/vuln/msrc_cve-2026-106547 msrc_CVE-2026-106547 https://db.gcve.eu/vuln/msrc_cve-2026-106547 https://db.gcve.eu/vuln/rhsa-2026:73539 <p>hdf5: HDF5: Denial of service via crafted HDF5 file hdf5: HDF5: Information disclosure and denial of service via crafted HDF5 file hdf5: HDF5: Denial of Service via integer underflow in Fletcher32 filter hdf5: HDF5: Denial of Service via crafted file in scale-offset filter hdf5: hdf5: Arbitrary code execution via heap-based buffer overflow</p> <p>hdf5: HDF5: Denial of service via crafted HDF5 file hdf5: HDF5: Information disclosure and denial of service via crafted HDF5 file hdf5: HDF5: Denial of Service via integer underflow in Fletcher32 filter hdf5: HDF5: Denial of Service via crafted file in scale-offset filter hdf5: hdf5: Arbitrary code execution via heap-based buffer overflow</p> https://db.gcve.eu/vuln/rhsa-2026:73539 https://db.gcve.eu/vuln/ubuntu-cve-2026-106547 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: hdf5, Ubuntu:Pro:16.04:LTS: hdf5, Ubuntu:Pro:18.04:LTS: hdf5, Ubuntu:Pro:20.04:LTS: hdf5, Ubuntu:20.04:LTS: r-bioc-rhdf5lib, Ubuntu:22.04:LTS: hdf5, Ubuntu:22.04:LTS: r-bioc-rhdf5lib, Ubuntu:24.04:LTS: hdf5, Ubuntu:24.04:LTS: r-bioc-rhdf5lib, Ubuntu:26.10: hdf5 and 3 more</p> <p>A heap-based buffer overflow in H5VM_array_fill() in src/H5VM.c in HDF5 before 2.2.0 lets a remote attacker cause an application crash and possibly execute arbitrary code with a crafted HDF5 file. When a dataset&#39;s unallocated chunks are read, H5D__fill_init() fills the fill-value buffer from datatype and dataspace metadata in the file. If that metadata is inconsistent with the buffer&#39;s allocated size, the write goes past the end of the buffer. The attacker can control the content written through the fill value stored in the file.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: hdf5, Ubuntu:Pro:16.04:LTS: hdf5, Ubuntu:Pro:18.04:LTS: hdf5, Ubuntu:Pro:20.04:LTS: hdf5, Ubuntu:20.04:LTS: r-bioc-rhdf5lib, Ubuntu:22.04:LTS: hdf5, Ubuntu:22.04:LTS: r-bioc-rhdf5lib, Ubuntu:24.04:LTS: hdf5, Ubuntu:24.04:LTS: r-bioc-rhdf5lib, Ubuntu:26.10: hdf5 and 3 more</p> <p>A heap-based buffer overflow in H5VM_array_fill() in src/H5VM.c in HDF5 before 2.2.0 lets a remote attacker cause an application crash and possibly execute arbitrary code with a crafted HDF5 file. When a dataset&#39;s unallocated chunks are read, H5D__fill_init() fills the fill-value buffer from datatype and dataspace metadata in the file. If that metadata is inconsistent with the buffer&#39;s allocated size, the write goes past the end of the buffer. The attacker can control the content written through the fill value stored in the file.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-106547