Search
Search is not available in local development.
Run npx pagefind --site __site after building to enable it.
JLSEC-2026-354 High 7.8

JLSEC-2026-354

JLSEC Published
Modified
Severity
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Packages
HDF5_jll < 1.14.2+0
Aliases / Upstream
CVE-2026-34734 EUVD-2026-21020

HDF5 is software for managing data. In 1.14.1-2 and earlier, a heap-use-after-free was found in the h5dump helper utility. An attacker who can supply a malicious h5 file can trigger a heap use-after-free. The freed object is referenced in a memmove call from H5Tconv_struct. The original object was allocated by H5Dtypeinfoinitphase3 and freed by H5D__typeinfo_term.

References