CVE-2026-19025

{
  "id": "CVE-2026-19025",
  "sourceIdentifier": "0253b833-3e77-4dfe-9d57-17db1a2f0a74",
  "published": "2026-08-05T23:16:53.483",
  "lastModified": "2026-10-23T21:10:00.157",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "H5O__layout_decode in H5Olayout.c in HDF5 through 2.3.0 does not validate that a chunked dataset's stored chunk-layout dimensionality matches its dataspace rank when an existing dataset is opened, whereas this check is performed only at dataset-creation time. This allows attackers to cause a denial of service (divide-by-zero and application crash in H5S__hyper_iter_get_seq_list in src/H5Shyper.c) via a crafted HDF5 file with mismatched chunk/dataspace ranks that is opened and read via H5Dopen2 and H5Dread, e.g. by the h5repack tool."
    },
    {
      "lang": "es",
      "value": "H5O__layout_decode en H5Olayout.c en HDF5 hasta 2.3.0 no valida que la dimensionalidad del diseño de fragmentos almacenado de un conjunto de datos fragmentado coincida con su rango de espacio de datos cuando se abre un conjunto de datos existente, mientras que esta verificación se realiza solo en el momento de la creación del conjunto de datos. Esto permite a los atacantes causar una denegación de servicio (división por cero y caída de la aplicación en H5S__hyper_iter_get_seq_list en src/H5Shyper.c) a través de un archivo HDF5 manipulado con rangos de fragmento/espacio de datos no coincidentes que se abre y lee a través de H5Dopen2 y H5Dread, por ejemplo, por la herramienta h5repack."
    }
  ],
  "affected": [
    {
      "source": "0253b833-3e77-4dfe-9d57-17db1a2f0a74",
      "affectedData": [
        {
          "vendor": "The HDF Group",
          "product": "HDF5",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "<= 2.3.0",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV40": [
      {
        "source": "0253b833-3e77-4dfe-9d57-17db1a2f0a74",
        "type": "Secondary",
        "cvssData": {
          "version": "4.0",
          "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "baseScore": 6.8,
          "baseSeverity": "MEDIUM",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "privilegesRequired": "NONE",
          "userInteraction": "PASSIVE",
          "vulnConfidentialityImpact": "NONE",
          "vulnIntegrityImpact": "NONE",
          "vulnAvailabilityImpact": "HIGH",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "subAvailabilityImpact": "NONE",
          "exploitMaturity": "NOT_DEFINED",
          "confidentialityRequirement": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "valueDensity": "NOT_DEFINED",
          "vulnerabilityResponseEffort": "NOT_DEFINED",
          "providerUrgency": "NOT_DEFINED"
        }
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-08-06T14:34:22.854081Z",
          "id": "CVE-2026-19025",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "0253b833-3e77-4dfe-9d57-17db1a2f0a74",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-369"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/HDFGroup/hdf5/issues/6491",
      "source": "0253b833-3e77-4dfe-9d57-17db1a2f0a74"
    },
    {
      "url": "https://github.com/HDFGroup/hdf5/issues/6491",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ]
}