CVE-2026-106547
HDF5 heap buffer overflow in H5VM_array_fill via crafted fill-value metadata
CVSS score
8.5
EPSS probability
%0.2
Risk score
0.0
Published
9 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
8.2
CVE-2026-19024
HDF5 H5Pget_fill_value NULL Pointer Dereference via Malformed Fill Value Message
TH
Patch status unknownEPSS %0
6.9
CVE-2026-19027
HDF5 out-of-bounds heap read in N-Bit filter decompression
TH
Patch status unknownEPSS %0
6.8
CVE-2026-19028
HDF5 integer underflow in Fletcher32 filter leads to massive out-of-bounds read
TH
Patch status unknownEPSS %0
6.8
CVE-2026-19026
Nbit filter NULL/short parameter-array dereference
TH
Patch status unknownEPSS %0
6.8
CVE-2026-19025
HDF5 divide-by-zero (SIGFPE) via mismatched chunk-layout dimensionality and dataspace rank on dataset open
TH
Patch status unknownEPSS %0
6.8
CVE-2026-19023
HDF5 h5dump Untrusted Pointer Dereference in Binary Output of Variable-Length String Datasets
TH
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-106547"