Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-26199

No fix known EPSS <1%CVSS 5.9

HDF5 is a high-performance library and a file format specification that implements the HDF5 data model. If `H5Iget_name` is invoked on a group id with `0` for the size parameter, it will underflow when trying to place a null terminator in the buffer. This can occur if `H5Iget_name` is invoked in a way where `size` can be forced to zero, and there is important data before the `name` buffer.

Published 2026-07-20 · CVE record · OSV

Products: hdfgroup hdf5

Distro releases

ReleasePackageFixed in
Debian 12hdf5no fix
Debian 13hdf5no fix
Debian 14hdf5no fix
Ubuntu 22.04 LTShdf5no fix
Ubuntu 24.04 LTShdf5no fix
Ubuntu 26.04 LTShdf5no fix
Ubuntu 26.10hdf5no fix
Ubuntu Pro 14.04 LTShdf5no fix
Ubuntu Pro 16.04 LTShdf5no fix
Ubuntu Pro 18.04 LTShdf5no fix
Ubuntu Pro 20.04 LTShdf5no fix