CVE-2026-26199General(hdfgroup / hdf5)

LOWCVSS 6.5 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

HDF5 is a high-performance library and a file format specification that implements the HDF5 data model. If `H5Iget_name` is invoked on a group id with `0` for the size parameter, it will underflow when trying to place a null terminator in the buffer. This can occur if `H5Iget_name` is invoked in a way where `size` can be forced to zero, and there is important data before the `name` buffer.

hdfgroup CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

https://github.com/HDFGroup/hdf5/blob/develop/src/H5Gname.c#L474

Vendor / third-party advisories

Weakness type (CWE)

CWE-124

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

hdf5

Threat summary

2 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
General: 2 classified signals
2 total mentions across 1 day

Affected systems

Vendors

hdfgroup

Products

hdf5

Deep dive

Activity timeline2 mentions / 1d

Signal classification1 categories

General

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

Infoflowcloud@infoflowcloud92d
General
🚨*CVE* CVE-2026-26199 HDF5 is a high-performance library and a file format specification that implements the HDF5 data model. If `H5Iget_name` is invoked on a group id with `0` for the siz… https://www.cve.org/CVERecord?id=CVE-2026-26199 ----- Traducción: CVE-2026-26199 HDF… http://infoflow.cloud`
Post summary
The post references CVE‑2026‑26199 with a brief technical mention but provides no PoC, exploit, patch, or evidence of active exploitation.
0000017
93 followersView on X
CVE@CVEnew92d
General
CVE-2026-26199 HDF5 is a high-performance library and a file format specification that implements the HDF5 data model. If `H5Iget_name` is invoked on a group id with `0` for the siz… https://www.cve.org/CVERecord?id=CVE-2026-26199
Post summary
The tweet points to CVE-2026-26199 and hints at a potential issue with the H5Iget_name function, but offers no exploits, patches, or evidence of active exploitation.
00000622
57.8K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	hdfgroup	hdf5	-	-	-

Explore more

Back to dashboard hdfgroup CVEs hdf5 vulnerabilities