CVE-2026-17572 HDF5 SOHM List Index Heap Buffer Overflow

Heap-based buffer overflow in the SOHM list-index deserialization code in HDF5 through 2.1.1 on all platforms allows attackers to cause a denial of service crash via a crafted HDF5 file whose shared-message list index declares a nummessages count exceeding listmax, triggering out-of-bounds heap...

PT-2026-64975

Name of the Vulnerable Software and Affected Versions HDF5 versions prior to 2.1.2 Description A heap-based buffer overflow exists in the SOHM list-index deserialization code. An attacker can cause a denial of service resulting in a crash by providing a specially crafted HDF5 file. This occurs wh...