Use After Free

Overview Affected versions of this package are vulnerable to Use After Free in the H5Tconvstruct function. An attacker can achieve arbitrary code execution or cause a denial of service by supplying a specially crafted h5 file that triggers a use-after-free condition during memory operations...

CVE-2026-34734 HDF5: H5T__conv_struct Use After Free

HDF5 is software for managing data. In 1.14.1-2 and earlier, a heap-use-after-free was found in the h5dump helper utility. An attacker who can supply a malicious h5 file can trigger a heap use-after-free. The freed object is referenced in a memmove call from H5Tconvstruct. The original object was...

CVE-2026-34734

CVE-2026-34734 affects HDF5 before or up to 1.14.1-2, with a heap-use-after-free in the h5dump utility. The freed object is referenced in a memmove call from H5T__conv_struct; the original object was allocated by H5D__typeinfo_init_phase3 and freed by H5D__typeinfo_term. This vulnerability can be...