CVE-2026-17572
Received Received - Intake

Heap-based Buffer Overflow in HDF5 Library

Publication date: 2026-07-27

Last updated on: 2026-07-27

Assigner: 0253b833-3e77-4dfe-9d57-17db1a2f0a74

Description
Heap-based buffer overflow in the SOHM list-index deserialization code in HDF5 through 2.1.1 on all platforms allows attackers to cause a denial of service (crash) via a crafted HDF5 file whose shared-message list index declares a num_messages count exceeding list_max, triggering out-of-bounds heap reads and writes in H5SM__cache_list_deserialize and H5SM__cache_list_verify_chksum.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-27
Last Modified
2026-07-27
Generated
2026-07-27
AI Q&A
2026-07-27
EPSS Evaluated
N/A
NVD
CVE-2026-17572
EUVD
EUVD-2026-49318

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
hdf_group hdf5 2.1.1
hdf_group hdf5 to 2.1.1 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-125 The product reads data past the end, or before the beginning, of the intended buffer.
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a heap-based buffer overflow in the HDF5 library's SOHM list-index deserialization code. It occurs when a crafted HDF5 file contains a shared-message list index with a num_messages count that exceeds the list_max value. This triggers out-of-bounds heap reads and writes in the functions H5SM__cache_list_deserialize and H5SM__cache_list_verify_chksum, leading to crashes or potential arbitrary code execution.

Detection Guidance

To detect this vulnerability, inspect HDF5 files for corrupted SOHM list indices where num_messages exceeds list_max. Use tools like h5dump or h5ls to analyze HDF5 files for abnormal list sizes. Check for crashes or errors during file operations that may indicate buffer overflows.

Impact Analysis

If you process untrusted HDF5 files, this vulnerability could allow attackers to crash your application or execute arbitrary code on your system. This is particularly dangerous if the HDF5 library is used in software handling sensitive data or critical infrastructure.

Compliance Impact

This vulnerability primarily causes denial-of-service conditions by crashing applications processing crafted HDF5 files. It does not directly expose or leak data, but may disrupt systems handling sensitive information. Compliance impact depends on system criticality and redundancy. GDPR may require breach notifications if processing is interrupted for EU residents. HIPAA systems could face availability failures affecting protected health information access.

Mitigation Strategies

Apply the patch from Pull Request #6499 to validate num_messages against list_max before processing. Avoid opening untrusted HDF5 files until patched. Monitor systems for crashes or memory corruption when handling HDF5 files.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-17572. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart