2135 matches found
CVE-2026-66066
CVE-2026-66066 — KindaRails2Shell Ruby on Rails Active Storage + libvips arbitrary file read → conditional remote code execution RCE PoC tool. Single-file, Python 3.11+ pure standard library with zero dependencies , includes MAT/HDF5 hybrid payloads, a pure-Python PNG pixel decoder, offset reads,...
rails-forensics-CVE-2026-66066
rails-forensics-CVE-2026-66066 Tooling and method for answering two questions about a Rails application and CVE-2026-66066, the Active Storage and libvips arbitrary file read known as KindaRails2Shell: 1. Was I vulnerable, and for how long? 2. Was I exploited, and if so, what left the building? T...
CVE-2026-0897
CVE-2026-0897 — Google Keras: Denial of Service via HDF5 Shape Bomb in Weight Loading -orange?style=for-the-badge -brightgreen?style=for-the-badge Overview...
CVE-2026-9335-keras-hdf5-externallink
CVE-2026-9335 — Keras HDF5 ExternalLink local file-content disclosure Two public Keras APIs — keras.saving.KerasFileEditor and keras.saving.loadweights / — read HDF5 group members by without a link-type check. h5py / on indexing, so an attacker-supplied , , or file containing only a link causes...
EUVD-2026-71788
Unidata netcdf-c through 4.10.1 contains an out-of-bounds write vulnerability in NC4HDF5inqattname that copies HDF5 attribute names into a fixed 256-byte buffer without length validation. Attackers can craft HDF5 files with oversized attribute names to overflow the destination buffer, causing...
Linux Distros Unpatched Vulnerability : CVE-2026-86095
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unidata netcdf-c through 4.10.1 contains an out-of-bounds write vulnerability in NC4HDF5inqattname that copies HDF5 attribute names into a fixed 256-byte buffer...
DEBIAN-CVE-2026-86095
Unidata netcdf-c through 4.10.1 contains an out-of-bounds write vulnerability in NC4HDF5inqattname that copies HDF5 attribute names into a fixed 256-byte buffer without length validation. Attackers can craft HDF5 files with oversized attribute names to overflow the destination buffer, causing...
CVE-2026-86095
Unidata netcdf-c through 4.10.1 contains an out-of-bounds write vulnerability in NC4HDF5inqattname that copies HDF5 attribute names into a fixed 256-byte buffer without length validation. Attackers can craft HDF5 files with oversized attribute names to overflow the destination buffer, causing...
CVE-2026-86095 Unidata netcdf-c through 4.10.1 Out-of-bounds Write via Oversized HDF5 Attribute Name
Unidata netcdf-c through 4.10.1 contains an out-of-bounds write vulnerability in NC4HDF5inqattname that copies HDF5 attribute names into a fixed 256-byte buffer without length validation. Attackers can craft HDF5 files with oversized attribute names to overflow the destination buffer, causing...
CVE-2026-86095 Unidata netcdf-c through 4.10.1 Out-of-bounds Write via Oversized HDF5 Attribute Name
Unidata netcdf-c through 4.10.1 contains an out-of-bounds write vulnerability in NC4HDF5inqattname that copies HDF5 attribute names into a fixed 256-byte buffer without length validation. Attackers can craft HDF5 files with oversized attribute names to overflow the destination buffer, causing...
CVE-2026-86095
Unidata netcdf-c through 4.10.1 contains an out-of-bounds write in NC4_HDF5_inq_attname() (file: libhdf5/hdf5attr.c). The function copies HDF5 attribute names into a fixed 256-byte buffer without length validation, allowing an attacker to craft malicious HDF5 files with oversized attribute names ...
CVE-2026-86095
Unidata netcdf-c through 4.10.1 contains an out-of-bounds write vulnerability in NC4HDF5inqattname that copies HDF5 attribute names into a fixed 256-byte buffer without length validation. Attackers can craft HDF5 files with oversized attribute names to overflow the destination buffer, causing...
PT-2026-86265
CVE-2026-86095 | Unidata netcdf-c has an out-of-bounds write in NC4 HDF5 inq attname—crafted HDF5 files overflow a 256-byte buffer, causing memory corruption or crashes. CVSS 7.8. Unpatched. Update immediately. https://t.co/VlVja4g3IT valtersit CVE CVEAlert infosec SysAdmin cybersecurity Linux...
hdf5: HDF5: Denial of Service due to malformed chunk data in files
A flaw was found in HDF5. An attacker can craft a malicious HDF5 file that, when opened and read by an application, exploits a validation bypass. This bypass, related to mismatched chunk-layout dimensionality and dataspace rank, leads to a divide-by-zero error, causing a denial of service DoS and...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: hdf5: hdf5-2.2.0-0.1.1.hum1 aarch64, x8664 hdf5-devel-2.2.0-0.1.1.hum1 aarch64, x8664 hdf5-mpich-2.2.0-0.1.1.hum1 aarch64, x8664 hdf5-mpich-devel-2.2.0-0.1.1.hum1 aarch64, x8664...
CVE-2026-19023
A flaw was found in HDF5. The h5dump tool, used for dumping HDF5 file contents, is vulnerable to an untrusted pointer dereference. An attacker could craft a malicious HDF5 file containing a variable-length string dataset. When this file is processed in binary output mode, it can lead to a denial ...
ROOT-OS-DEBIAN-12-CVE-2024-32623 CVE-2024-32623 in hdf5 - Patched by Root
Root has patched CVE-2024-32623 in the hdf5 package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2024-33877 CVE-2024-33877 in hdf5 - Patched by Root
Root has patched CVE-2024-33877 in the hdf5 package for Root:Debian:12. Multiple fixed versions available...