CVE-2026-120689

HDF5 through 2.2.0 contains an uncontrolled recursion vulnerability in H5Biteratehelper in src/H5B.c. When iterating a version 1 B-tree, the function does not verify that a child node’s level matches the expected level. That check is performed only in H5Bcachedeserialize when a node is first load...

CVE-2026-120689 Uncontrolled Recursion in HDF5 H5B__iterate_helper() via Crafted File

HDF5 through 2.2.0 contains an uncontrolled recursion vulnerability in H5Biteratehelper in src/H5B.c. When iterating a version 1 B-tree, the function does not verify that a child node’s level matches the expected level. That check is performed only in H5Bcachedeserialize when a node is first load...

EUVD-2026-115545

HDF5 through 2.2.0 contains an uncontrolled recursion vulnerability in H5Biteratehelper in src/H5B.c. When iterating a version 1 B-tree, the function does not verify that a child node’s level matches the expected level. That check is performed only in H5Bcachedeserialize when a node is first load...

CVE-2026-120689

HDF5 versions through 2.2.0 are vulnerable to an uncontrolled recursion flaw in the H5B__iterate_helper() function located in src/H5B.c . The vulnerability occurs when iterating a version 1 B-tree because the software fails to verify that a child node's level matches the expected level, except du...

CVE-2026-120689 Uncontrolled Recursion in HDF5 H5B__iterate_helper() via Crafted File

HDF5 through 2.2.0 contains an uncontrolled recursion vulnerability in H5Biteratehelper in src/H5B.c. When iterating a version 1 B-tree, the function does not verify that a child node’s level matches the expected level. That check is performed only in H5Bcachedeserialize when a node is first load...

CVE-2026-120689: The HDF Group HDF5: HDF5 through 2.2.0 contains an uncontrolled recursion vulnerability in H5B__iterate_helper() in src/H5B.c

HDF5 through 2.2.0 contains an uncontrolled recursion vulnerability in H5Biteratehelper in src/H5B.c. When iterating a version 1 B-tree, the function does not verify that a child node’s level matches the expected level. That check is performed only in H5Bcachedeserialize when a node is first load...