CVE-2026-26200

HDF5 is software for managing data. Prior to version 1.14.4-2, an attacker who can control an `h5` file parsed by HDF5 can trigger a write-based heap buffer overflow condition. This can lead to a denial-of-service condition, and potentially further issues such as remote code execution depending on the practical exploitability of the heap overflow against modern operating systems. Real-world exploitability of this issue in terms of remote-code execution is currently unknown. Version 1.14.4-2 fixes the issue.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/HDFGroup/hdf5/security/advisories/GHSA-5p2m-j456-9mr2	Exploit Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-26200
https://bugzilla.redhat.com/show_bug.cgi?id=2441088
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-26200.json

Configurations

Configuration 1 (hide)

cpe:2.3:a:hdfgroup:hdf5:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2026-02-19 20:25

Updated : 2026-07-15 02:19

NVD link : CVE-2026-26200

Mitre link : CVE-2026-26200

CVE.ORG link : CVE-2026-26200

JSON object : View

Products Affected

hdfgroup

hdf5

CWE

CWE-122

Heap-based Buffer Overflow

CWE-787

Out-of-bounds Write

CWE-131

Incorrect Calculation of Buffer Size

{"id": "CVE-2026-26200", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-26200", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-02-19T21:16:38.054988Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}, {"type": "Secondary", "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "HDFGroup", "product": "hdf5", "versions": [{"status": "affected", "version": "< 1.14.4-2"}]}]}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "affectedData": [{"cpes": ["cpe:/a:redhat:enterprise_linux_ai:3"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux AI (RHEL AI) 3", "packageName": "hdf5", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}]}], "published": "2026-02-19T20:25:42.610", "references": [{"url": "https://github.com/HDFGroup/hdf5/security/advisories/GHSA-5p2m-j456-9mr2", "tags": ["Exploit", "Third Party Advisory"], "source": "security-advisories@github.com"}, {"url": "https://access.redhat.com/security/cve/CVE-2026-26200", "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2441088", "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}, {"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-26200.json", "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-122"}]}, {"type": "Secondary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-787"}]}, {"type": "Secondary", "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "description": [{"lang": "en", "value": "CWE-131"}]}], "descriptions": [{"lang": "en", "value": "HDF5 is software for managing data. Prior to version 1.14.4-2, an attacker who can control an `h5` file parsed by HDF5 can trigger a write-based heap buffer overflow condition. This can lead to a denial-of-service condition, and potentially further issues such as remote code execution depending on the practical exploitability of the heap overflow against modern operating systems. Real-world exploitability of this issue in terms of remote-code execution is currently unknown. Version 1.14.4-2 fixes the issue."}, {"lang": "es", "value": "HDF5 es un software para la gesti\u00f3n de datos. Antes de la versi\u00f3n 1.14.4-2, un atacante que puede controlar un archivo 'h5' analizado por HDF5 puede desencadenar una condici\u00f3n de desbordamiento de b\u00fafer de mont\u00edculo basado en escritura. Esto puede llevar a una condici\u00f3n de denegaci\u00f3n de servicio, y potencialmente a problemas adicionales como la ejecuci\u00f3n remota de c\u00f3digo dependiendo de la explotabilidad pr\u00e1ctica del desbordamiento de mont\u00edculo contra sistemas operativos modernos. La explotabilidad real de este problema en t\u00e9rminos de ejecuci\u00f3n remota de c\u00f3digo es actualmente desconocida. La versi\u00f3n 1.14.4-2 corrige el problema."}], "lastModified": "2026-07-15T02:19:00.980", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hdfgroup:hdf5:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "75A3E09A-12A9-4186-9CA7-F34D0D169F17", "versionEndExcluding": "1.14.4.2"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}