DEBIAN-CVE-2026-106547

See a problem?
Please try reporting it to the source first.

Source

https://security-tracker.debian.org/tracker/CVE-2026-106547

Import Source

https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-106547.json

JSON Data

https://api.osv.dev/v1/vulns/DEBIAN-CVE-2026-106547

Upstream

CVE-2026-106547

Published

2026-10-06T21:17:18Z

Modified

2026-10-08T09:47:39Z

Severity

8.5 (High) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X CVSS Calculator

Summary

[none]

Details

A heap-based buffer overflow in H5VM_array_fill() in src/H5VM.c in HDF5 before 2.2.0 lets a remote attacker cause an application crash and possibly execute arbitrary code with a crafted HDF5 file. When a dataset's unallocated chunks are read, H5D__fill_init() fills the fill-value buffer from datatype and dataspace metadata in the file. If that metadata is inconsistent with the buffer's allocated size, the write goes past the end of the buffer. The attacker can control the content written through the fill value stored in the file.

References

https://security-tracker.debian.org/tracker/CVE-2026-106547

Affected packages

Debian:12 / hdf5

Package

Name: hdf5
Purl: pkg:deb/debian/hdf5?arch=source&distro=bookworm

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.10.8+repack1-1

1.10.10+repack-1

1.10.10+repack-2

1.10.10+repack-3

1.10.10+repack-3.1

1.10.10+repack-3.2

1.10.10+repack-3.2+ports

1.10.10+repack-3.3

1.10.10+repack-4

1.10.10+repack-5

1.12.0+repack-1~exp1

1.12.0+repack-1~exp2

1.12.2+repack-1~exp1

1.14.3+repack-1~exp1

1.14.3+repack1-1~exp2

1.14.3+repack1-1~exp3

1.14.4.3+repack-1~exp1

1.14.4.3+repack-1~exp2

1.14.4.3+repack-1~exp3

1.14.5+repack-1~exp1

1.14.5+repack-1~exp2

1.14.5+repack-1~exp3

1.14.5+repack-1~exp4

1.14.5+repack-1~exp5

1.14.5+repack-1~exp6

1.14.5+repack-1

1.14.5+repack-2

1.14.5+repack-3~exp1

1.14.5+repack-3~exp2

1.14.5+repack-3~exp3

1.14.5+repack-3~exp4

1.14.5+repack-3

1.14.5+repack-3.1

1.14.5+repack-4~exp1

1.14.5+repack-4~exp2

1.14.5+repack-4

1.14.5+repack-5~exp2

1.14.5+repack-5~exp3

1.14.6+repack-1~exp1

1.14.6+repack-1~exp2

1.14.6+repack-1~exp3

1.14.6+repack-1~exp4

1.14.6+repack-1~exp5

1.14.6+repack-1~exp6

1.14.6+repack-1~exp7

1.14.6+repack-1~exp8

1.14.6+repack-1~exp9

1.14.6+repack-1~exp10

1.14.6+repack-1~exp11

1.14.6+repack-1~exp12

1.14.6+repack-1~exp13

1.14.6+repack-1~exp14

1.14.6+repack-1~exp15

1.14.6+repack-1~exp16

1.14.6+repack-1~exp17

1.14.6+repack-1~exp18

1.14.6+repack-1~exp19

1.14.6+repack-1~exp20

1.14.6+repack-1~exp21

1.14.6+repack-1

1.14.6+repack-2

1.14.6+repack-3~exp1

2.*

2.1.0+repack-1~exp3

2.1.0+repack-1~exp4

2.1.0+repack-1~exp5

2.1.0+repack-1~exp6

2.1.0+repack-1~exp7

2.1.0+repack-1~exp8

2.1.0+repack-1~exp9

2.1.0+repack-1~exp10

2.1.0+repack-1~exp11

2.1.0+repack-1

2.2.0+repack-1

2.2.0+repack-2

2.2.0+repack-3

2.2.0+repack-4

2.2.0+repack-5

Ecosystem specific

{
    "urgency": "unimportant"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-106547.json"

Debian:13 / hdf5

Package

Name: hdf5
Purl: pkg:deb/debian/hdf5?arch=source&distro=trixie

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.14.5+repack-3

1.14.5+repack-3.1

1.14.5+repack-4~exp1

1.14.5+repack-4~exp2

1.14.5+repack-4

1.14.5+repack-5~exp2

1.14.5+repack-5~exp3

1.14.6+repack-1~exp1

1.14.6+repack-1~exp2

1.14.6+repack-1~exp3

1.14.6+repack-1~exp4

1.14.6+repack-1~exp5

1.14.6+repack-1~exp6

1.14.6+repack-1~exp7

1.14.6+repack-1~exp8

1.14.6+repack-1~exp9

1.14.6+repack-1~exp10

1.14.6+repack-1~exp11

1.14.6+repack-1~exp12

1.14.6+repack-1~exp13

1.14.6+repack-1~exp14

1.14.6+repack-1~exp15

1.14.6+repack-1~exp16

1.14.6+repack-1~exp17

1.14.6+repack-1~exp18

1.14.6+repack-1~exp19

1.14.6+repack-1~exp20

1.14.6+repack-1~exp21

1.14.6+repack-1

1.14.6+repack-2

1.14.6+repack-3~exp1

2.*

2.1.0+repack-1~exp3

2.1.0+repack-1~exp4

2.1.0+repack-1~exp5

2.1.0+repack-1~exp6

2.1.0+repack-1~exp7

2.1.0+repack-1~exp8

2.1.0+repack-1~exp9

2.1.0+repack-1~exp10

2.1.0+repack-1~exp11

2.1.0+repack-1

2.2.0+repack-1

2.2.0+repack-2

2.2.0+repack-3

2.2.0+repack-4

2.2.0+repack-5

Ecosystem specific

{
    "urgency": "unimportant"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-106547.json"

Debian:14 / hdf5

Package

Name: hdf5
Purl: pkg:deb/debian/hdf5?arch=source&distro=forky

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.14.5+repack-3

1.14.5+repack-3.1

1.14.5+repack-4~exp1

1.14.5+repack-4~exp2

1.14.5+repack-4

1.14.5+repack-5~exp2

1.14.5+repack-5~exp3

1.14.6+repack-1~exp1

1.14.6+repack-1~exp2

1.14.6+repack-1~exp3

1.14.6+repack-1~exp4

1.14.6+repack-1~exp5

1.14.6+repack-1~exp6

1.14.6+repack-1~exp7

1.14.6+repack-1~exp8

1.14.6+repack-1~exp9

1.14.6+repack-1~exp10

1.14.6+repack-1~exp11

1.14.6+repack-1~exp12

1.14.6+repack-1~exp13

1.14.6+repack-1~exp14

1.14.6+repack-1~exp15

1.14.6+repack-1~exp16

1.14.6+repack-1~exp17

1.14.6+repack-1~exp18

1.14.6+repack-1~exp19

1.14.6+repack-1~exp20

1.14.6+repack-1~exp21

1.14.6+repack-1

1.14.6+repack-2

1.14.6+repack-3~exp1

2.*

2.1.0+repack-1~exp3

2.1.0+repack-1~exp4

2.1.0+repack-1~exp5

2.1.0+repack-1~exp6

2.1.0+repack-1~exp7

2.1.0+repack-1~exp8

2.1.0+repack-1~exp9

2.1.0+repack-1~exp10

2.1.0+repack-1~exp11

2.1.0+repack-1

2.2.0+repack-1

2.2.0+repack-2

2.2.0+repack-3

2.2.0+repack-4

2.2.0+repack-5

Ecosystem specific

{
    "urgency": "unimportant"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-106547.json"