CVE-2026-17573— Double Free in H5D__chunk_copy() in HDF5 via a Crafted Chunk-Index Size Field
Quick assessment
Affected
The HDF Group HDF5
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在HDF5库中发现了一个双重释放漏洞。通过h5repack处理包含超大块大小字段的精心构造的HDF5文件时，可能会因双重释放导致应用程序终止。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| The HDF Group | HDF5 | <= 2.1.1 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-17573
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Double Free in H5D__chunk_copy() in HDF5 via a Crafted Chunk-Index Size Field
Source: CVE Program / CVE List V5
Vulnerability Description
A double free vulnerability was discovered in the HDF5 library. Processing a crafted HDF5 file containing an oversized chunk size field via h5repack may cause the application to abort due to a double free.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U
Source: CVE Program / CVE List V5
Vulnerability Type
双重释放
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| The HDF Group | HDF5 | <= 2.1.1 | - |
|
II. Public POCs for CVE-2026-17573
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-17573
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-17573 (1)
Same Patch Batch · The HDF Group · 2026-07-27 · 3 CVEs total
| CVE-2026-17572 | 5.5 MEDIUM | HDF5 SOHM List Index Heap Buffer Overflow |
| CVE-2026-17574 | 5.2 MEDIUM | NULL Pointer Dereference in HDF5 via Invalid Variable-Length Datatype Type Tag |
IV. Related Vulnerabilities
Same product: HDF5
-
CVE-2026-92627
Heap Use-After-Free in H5T__conv_f_f -
CVE-2026-19028
HDF5 integer underflow in Fletcher32 filter leads to massive -
CVE-2026-19027
HDF5 out-of-bounds heap read in N-Bit filter decompression -
CVE-2026-19026
Nbit filter NULL/short parameter-array dereference -
CVE-2026-19025
HDF5 divide-by-zero (SIGFPE) via mismatched chunk-layout dim
Same vendor: The HDF Group
-
CVE-2026-92627
Heap Use-After-Free in H5T__conv_f_f -
CVE-2026-19028
HDF5 integer underflow in Fletcher32 filter leads to massive -
CVE-2026-19027
HDF5 out-of-bounds heap read in N-Bit filter decompression -
CVE-2026-19026
Nbit filter NULL/short parameter-array dereference -
CVE-2026-19025
HDF5 divide-by-zero (SIGFPE) via mismatched chunk-layout dim
Same weakness: CWE-415
-
CVE-2026-91018
Double Free in lwIP (lightweight IP) -
CVE-2026-11388
Double Free vulnerability in RTI Connext Professional (Core -
CVE-2026-17050
Double free of the USB host configuration descriptor when de -
CVE-2026-20135
Cisco Secure Firewall Threat Defense Software TLS 1.3 Denial -
CVE-2026-85921
Windows Secure Kernel Mode Elevation of Privilege Vulnerabil
V. Comments for CVE-2026-17573
No comments yet