CVE-2026-120757

HDF5 through 2.2.0 contains a heap buffer over-read vulnerability in H5Lexterntraverse in src/H5Lexternal.c, the default traversal callback for external links. The callback locates the target file name and object path within the link’s user data using strlen without validating the buffer against...

EUVD-2026-116012

HDF5 through 2.2.0 contains a heap buffer over-read vulnerability in H5Lexterntraverse in src/H5Lexternal.c, the default traversal callback for external links. The callback locates the target file name and object path within the link’s user data using strlen without validating the buffer against...

CVE-2026-120757

HDF5 versions through 2.2.0 are vulnerable to a heap buffer over-read in the H5L__extern_traverse() function located in src/H5Lexternal.c. The root cause is the use of strlen() to locate target file names and object paths within external link user data without validating the buffer against its st...

CVE-2026-120757 Heap Buffer Over-read via Non-Terminated Link Data in H5L__extern_traverse

HDF5 through 2.2.0 contains a heap buffer over-read vulnerability in H5Lexterntraverse in src/H5Lexternal.c, the default traversal callback for external links. The callback locates the target file name and object path within the link’s user data using strlen without validating the buffer against...

CVE-2026-120757 Heap Buffer Over-read via Non-Terminated Link Data in H5L__extern_traverse

HDF5 through 2.2.0 contains a heap buffer over-read vulnerability in H5Lexterntraverse in src/H5Lexternal.c, the default traversal callback for external links. The callback locates the target file name and object path within the link’s user data using strlen without validating the buffer against...

CVE-2026-120757: The HDF Group HDF5: HDF5 through 2.2.0 contains a heap buffer over-read vulnerability in H5L__extern_traverse() in src/H5Lexternal.c, the…

HDF5 through 2.2.0 contains a heap buffer over-read vulnerability in H5Lexterntraverse in src/H5Lexternal.c, the default traversal callback for external links. The callback locates the target file name and object path within the link’s user data using strlen without validating the buffer against...

OSV-2023-133 Heap-buffer-overflow in H5L__extern_traverse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56501 Crash type: Heap-buffer-overflow READ Crash state: H5Lexterntraverse H5Gtraversespecial H5Gtraversereal...

hdf5:h5_extended_fuzzer: Heap-buffer-overflow in H5L__extern_traverse

Project: https://github.com/HDFGroup/hdf5.git Detailed Report: https://oss-fuzz.com/testcase?key=6268855837392896 Project: hdf5 Fuzzing Engine: libFuzzer Fuzz Target: h5extendedfuzzer Job Type: libfuzzerasanhdf5 Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x6040000081f...