{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3ahdfgrouphdf5/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:hdfgroup:hdf5:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.1,"id":"CVE-2026-120757"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["HDF5 (\u003c= 2.2.0)"],"_cs_severities":["high"],"_cs_tags":["vulnerability","hdf5","heap-overflow","memory-safety"],"_cs_type":"advisory","_cs_vendors":["The HDF Group"],"content_html":"\u003cp\u003eHDF5 through version 2.2.0 contains a heap buffer over-read vulnerability in the \u003ccode\u003eH5L__extern_traverse()\u003c/code\u003e function within \u003ccode\u003esrc/H5Lexternal.c\u003c/code\u003e. The flaw stems from the use of \u003ccode\u003estrlen()\u003c/code\u003e to process link user data without validating the buffer size or checking for NULL termination. An attacker can supply a specially crafted HDF5 file containing an external link that, when traversed, triggers an unbounded read of memory beyond the heap buffer. This behavior can lead to application crashes (denial of service) or allow sensitive data in adjacent heap memory to be leaked into the file path or object path buffers.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eAn attacker can induce a denial of service by crashing the application. Additionally, there is a risk of information disclosure where adjacent heap contents are incorporated into the external file name or object path, which the library subsequently attempts to open.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAudit applications utilizing HDF5 libraries to identify versions 2.2.0 or older.\u003c/li\u003e\n\u003cli\u003ePrioritize upgrading to a patched release of HDF5 as soon as it becomes available from The HDF Group.\u003c/li\u003e\n\u003cli\u003eImplement file integrity and validation checks for HDF5 files ingested from untrusted or external sources to prevent the processing of malicious link structures.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-03T22:18:35Z","date_published":"2026-11-03T22:18:35Z","id":"https://feed.craftedsignal.io/briefs/2026-11-hdf5-heap-buffer-over-read/","summary":"HDF5 versions 2.2.0 and earlier contain a heap buffer over-read vulnerability in the external link traversal callback that can be triggered by a crafted file, potentially leading to denial of service or information disclosure.","title":"HDF5: Heap buffer over-read in H5L__extern_traverse (CVE-2026-120757)","url":"https://feed.craftedsignal.io/briefs/2026-11-hdf5-heap-buffer-over-read/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:hdfgroup:hdf5:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}