Mmastodon TechnologyCybersecurity first seen 8 h ago, last 8 h ago, peak #12

High-severity heap overflow vulnerability disclosed in HDF5

Original: 🚨 EUVD-2026-93991 📊 Score: 8.5/10 (CVSS v3.1) 📦 Product: HDF5 🏢 Vendor: The HDF Group 📅 Updated: 2026-10-06 📝 A heap-bas

A high-severity vulnerability, EUVD-2026-93991, has been catalogued in the HDF5 data format library maintained by The HDF Group. The flaw is a heap-based buffer overflow in H5VM_array_fill() in src/H5VM.c affecting HDF5 versions before 2.2.0, with a CVSS v3.1 score of 8.5. It can let a remote attacker crash applications and potentially execute arbitrary code. Security feeds circulated the advisory on 6 October 2026.

Why now: A newly updated high-severity vulnerability in a widely used scientific data library concerns security teams tracking patching priorities.

HDF5The HDF GroupEUVD-2026-93991

Open on mastodon →

Evidence

• 🚨 EUVD-2026-93991 📊 Score: 8.5/10 (CVSS v3.1) 📦 Product: HDF5 🏢 Vendor: The HDF Group 📅 Updated: 2026-10-06 📝 A heap-based buffer overflow in H5VM_array_fill() in src/H5VM.c in HDF5 before 2.2.0 lets a remote attacker cause an application crash and possibly execute arbitrary… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/1286224