CVE-2026-35001: OpenS100 affected git revisions

Affected technology

OpenS100 · 0 through daaa35b19b789aa4b170bdcc300763a287d73164
OpenS100 Project

Description’s affected range: through commit daa35b

Component: Not specified by the source
Function: to

Attack conditions (Vendor/CNA, CVSS 4.0): Local · No privileges required · Active user interaction

What an attacker can do

Remote attackers can cause a heap-based buffer overflow by opening a crafted S-102 HDF5 file with malicious grid dimension metadata. Vendor/CNA’s CVSS 4.0 assessment (base score 8.4/10) rates confidentiality, integrity and availability impact as high.