CVE-2026-19029: HDF5 < 2.2.0

Affected technology

HDF5 · < 2.2.0
The HDF Group

Description’s affected range: through 2.2.0 lets an attacker cause a denial of service (application crash) with a crafted HDF5 file

Component: H5Z__filter_scaleoffset

Attack conditions (Source advisory, CVSS 4.0): Local · No privileges required · Passive user interaction

What an attacker can do

The source reports that an attacker could disrupt service under the conditions described by the source. Source advisory’s CVSS 4.0 assessment (base score 6.8/10) rates confidentiality and integrity impact as none; availability impact as high.