CVE-2026-19025: HDF5 divide-by-zero (SIGFPE) via mismatched chunk-layout dimensionality and dataspace rank on dataset open
H5Olayoutdecode in H5Olayout.c in HDF5 through 2.3.0 does not validate that a chunked dataset's stored chunk-layout dimensionality matches its dataspace rank when an existing dataset is opened, whereas this check is performed only at dataset-creation time. This allows attackers to cause a denial of service (divide-by-zero and application crash in H5Shyperitergetseqlist in src/H5Shyper.c) via a crafted HDF5 file with mismatched chunk/dataspace ranks that is opened and read via H5Dopen2 and H5Dread, e.g. by the h5repack tool.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-19025?
CVE-2026-19025 has a risk rating of 26, indicating a significant security threat.
How do I fix CVE-2026-19025?
To fix CVE-2026-19025, ensure that you update to HDF5 version 2.3.1 or later, where this issue is resolved.
What type of vulnerability is CVE-2026-19025?
CVE-2026-19025 is a divide-by-zero vulnerability that can lead to denial-of-service conditions.
Which software is affected by CVE-2026-19025?
CVE-2026-19025 affects the HDF5 software developed by the HDF Group, specifically versions up to 2.3.0.
What can attackers achieve by exploiting CVE-2026-19025?
By exploiting CVE-2026-19025, attackers can trigger a denial-of-service attack on systems utilizing affected versions of HDF5.