CVE-2026-17572

Analyzed Analyzed - Analysis Complete

Heap-based Buffer Overflow in HDF5 Library

Publication date: 2026-07-27

Last updated on: 2026-08-18

Assigner: HDFG

Description

Heap-based buffer overflow in the SOHM list-index deserialization code in HDF5 through 2.1.1 on all platforms allows attackers to cause a denial of service (crash) via a crafted HDF5 file whose shared-message list index declares a num_messages count exceeding list_max, triggering out-of-bounds heap reads and writes in H5SM__cache_list_deserialize and H5SM__cache_list_verify_chksum.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-27

Last Modified

2026-08-18

Generated

2026-09-06

AI Q&A

2026-07-27

EPSS Evaluated

2026-09-04

NVD

CVE-2026-17572

EUVD

EUVD-2026-49318

Affected Vendors & Products

Vendor	Product	Version / Range
hdfgroup	hdf5	to 2.2.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is a heap-based buffer overflow in the HDF5 library's SOHM list-index deserialization code. It occurs when a crafted HDF5 file contains a shared-message list index with a num_messages count that exceeds the list_max value. This triggers out-of-bounds heap reads and writes in the functions H5SM__cache_list_deserialize and H5SM__cache_list_verify_chksum, leading to crashes or potential arbitrary code execution.

Detection Guidance

To detect this vulnerability, inspect HDF5 files for corrupted SOHM list indices where num_messages exceeds list_max. Use tools like h5dump or h5ls to analyze HDF5 files for abnormal list sizes. Check for crashes or errors during file operations that may indicate buffer overflows.

Impact Analysis

If you process untrusted HDF5 files, this vulnerability could allow attackers to crash your application or execute arbitrary code on your system. This is particularly dangerous if the HDF5 library is used in software handling sensitive data or critical infrastructure.

Compliance Impact

This vulnerability primarily causes denial-of-service conditions by crashing applications processing crafted HDF5 files. It does not directly expose or leak data, but may disrupt systems handling sensitive information. Compliance impact depends on system criticality and redundancy. GDPR may require breach notifications if processing is interrupted for EU residents. HIPAA systems could face availability failures affecting protected health information access.

Mitigation Strategies

Apply the patch from Pull Request #6499 to validate num_messages against list_max before processing. Avoid opening untrusted HDF5 files until patched. Monitor systems for crashes or memory corruption when handling HDF5 files.

Hi! I’m here to help you understand CVE-2026-17572. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70