CVE-2026-19028
CVE-2026-19028: 1 tracked advisory record across Red Hat. Compare vendor sources and published fix guidance.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
Red Hat
1 advisory- Advisory severityMedium5.5
Medium [CVE-2026-19028] Denial of Service via integer underflow in Fletcher32 filter
CVE-2026-19028Source published Source updated
H5Z__filter_fletcher32 in H5Zfletcher32.c in HDF5 through 2.3.0 computes the data length to checksum by subtracting the 4-byte trailing checksum size from the input buffer size without checking that the buffer is at least 4 bytes, allowing a size_t underflow. This allows attackers to cause a denial of service (massively out-of-bounds read and application crash in H5_checksum_fletcher32) via a crafted HDF5 file with a Fletcher32-filtered chunk smaller than 4 bytes, triggered via H5Dread, e.g. by the h5ls or h5dump tools. A flaw was found in HDF5. An attacker can craft a malicious HDF5 file with a specially designed Fletcher32-filtered chunk. When this file is processed, an integer underflow occurs due to insufficient size validation, leading to a massive out-of-bounds read. An integer…
- Affected products in this advisory
- Red Hat Hardened Images
- Red Hat Enterprise Linux AI (RHEL AI) 3
- Source-reported affected versions
- 2.3.0
- Source-reported fixed versions
- hdf5-main-2.2.0-0.1.2.hum1
- RHSA-2026:73539
- Mitigation guidance
- Do not open or process untrusted HDF5 files from unverified sources using tools or services linked against the HDF5 library. Enforce file-ingestion boundaries or access controls to restrict automated parsing of untrusted datasets.
Android app · Google Play
Monitor future Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.