CVE-2026-17572 PUBLISHED

HDF5 SOHM List Index Heap Buffer Overflow

Assigner: HDFG
Reserved: 27.07.2026 Published: 27.07.2026 Updated: 27.07.2026

Heap-based buffer overflow in the SOHM list-index deserialization code in HDF5 through 2.1.1 on all platforms allows attackers to cause a denial of service (crash) via a crafted HDF5 file whose shared-message list index declares a num_messages count exceeding list_max, triggering out-of-bounds heap reads and writes in H5SM__cache_list_deserialize and H5SM__cache_list_verify_chksum.

Metrics

CVSS 4.0

CVSS Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:H/SC:N/SI:L/SA:H/E:U
CVSS Score: 5.5

Exploitability Metrics		Vulnerable System Impact Metrics		Subsequent System Impact Metrics
Attack Vector	Local	Confidentiality	None	Confidentiality	None
Attack Complexity	Low	Integrity	Low	Integrity	Low
Attack Requirements	None	Availability	High	Availability	High
Privileges Required	None
User Interaction	Active

CVSS 4.0

Product Status

Vendor	The HDF Group
Product	HDF5
Versions	Default: unaffected Version <= 2.1.1 is affected

References

https://github.com/HDFGroup/hdf5/issues/6501

Problem Types

CWE-125 Out-of-bounds read CWE
CWE-787 Out-of-bounds write CWE

Impacts

CAPEC-100 Overflow Buffers