Medium [CVE-2026-19026] Denial of service via crafted HDF5 file
This medium-severity Red Hat Linux advisory covers CVE-2026-19026 affecting Red Hat Enterprise Linux AI (RHEL AI) 3, Red Hat Hardened Images.
Android app · Google Play
Monitor future Red Hat Linux CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Summary
H5Z__filter_nbit in H5Znbit.c in HDF5 through 2.3.0 dereferences cd_values[0] through cd_values[4] without validating that cd_values is non-NULL or that cd_nelmts is at least 5, the fixed size of the filter's header.
This allows attackers to cause a denial of service via a crafted HDF5 file that stores the N-Bit filter pipeline message with zero client-data values, opened and read via H5Dread, e.g. by the h5ls or h5repack tools. A flaw was found in HDF5.
A remote attacker could craft a malicious HDF5 file that, when opened and read, would cause an application using the HDF5 library to crash. This issue stems from improper validation of input data within the N-Bit filter, leading to a denial of service (DoS) and impacting the availability of services that process these files.
When processing dataset pipelines, the function accesses elements in the cd_values array without verifying that the pointer is non-NULL or that cd_nelmts meets the minimum 5-element header requirement.
Opening and reading this file using H5Dread() or utilities like h5ls and h5repack triggers a NULL pointer dereference or out-of-bounds read, causing an application crash and denial of service. Red Hat severity: Moderate — CVSS 5.5 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H).
Weakness: CWE-476. Affected Red Hat products: Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat Hardened Images.
- 2.3.0
Official advisory · high-confidence parse· fetched 1 hour ago·verify at source
Fixed versions
No fixed release is recorded yet. That does not prove no patch exists — confirm against the vendor advisory.
Official advisory · high-confidence parse· fetched 1 hour ago·verify at source
Mitigation checklist
- Do not open or process untrusted HDF5 files using applications or CLI tools (such as h5ls or h5repack) linked against vulnerable versions of the HDF5 library. Verify file sources or isolate untrusted file parsing within a restricted, sandboxed environment.
Official advisory · high-confidence parse· fetched 1 hour ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.