Skip to content
CVE PROGRAM SOURCE RECORD4.0 Medium

CVE-2026-17573

Double Free in H5D__chunk_copy() in HDF5 via a Crafted Chunk-Index Size Field

Description

A double free vulnerability was discovered in the HDF5 library. Processing a crafted HDF5 file containing an oversized chunk size field via h5repack may cause the application to abort due to a double free.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

The HDF Group HDF5

Default version status: unaffected

  • <= 2.1.1affected

References