CVE-2026-17572 — HDF5 SOHM List Index Heap Buffer Overflow

CVE-2026-17572

HDF5 SOHM List Index Heap Buffer Overflow PUBLISHED

Description (CNA)

Heap-based buffer overflow in the SOHM list-index deserialization code in HDF5 through 2.1.1 on all platforms allows attackers to cause a denial of service (crash) via a crafted HDF5 file whose shared-message list index declares a num_messages count exceeding list_max, triggering out-of-bounds heap reads and writes in H5SM__cache_list_deserialize and H5SM__cache_list_verify_chksum.

Affected (CNA)

Vendor / product	Versions
The HDF Group / HDF5	affected <= 2.1.1

CWE

CWE-125, CWE-787

References

https://github.com/HDFGroup/hdf5/issues/6501

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.