Nixpkgs security tracker

Login with GitHub

Details of issue NIXPKGS-2026-2295

NIXPKGS-2026-2295
published 5 hours ago
hdf5: security issues < 2.2.0
Permalink CVE-2026-17572
5.5 MEDIUM
  • CVSS version (CVSS): 4.0
  • Attack Vector (AV): Local (L)
  • Attack Complexity (AC): Low (L)
  • Attack Requirement (AT): None (N)
  • Privileges Required (PR): None (N)
  • User Interaction (UI): Active (A)
  • Vulnerable System Impact Confidentiality (VC): None (N)
  • Vulnerable System Impact Integrity (VI): Low (L)
  • Vulnerable System Impact Availability (VA): High (H)
  • Subsequent System Impact Confidentiality (SC): None (N)
  • Subsequent System Impact Integrity (SI): Low (L)
  • Subsequent System Impact Availability (SA): High (H)
  • Exploit Maturity (E): Unreported (U)
  • Modified Attack Vector (MAV): Local (L)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Attack Requirement (MAT): None (N)
  • Modified Privileges Required (MPR): None (N)
  • Modified User Interaction (MUI): Active (A)
  • Modified Vulnerable System Impact Confidentiality (MVC): None (N)
  • Modified Vulnerable System Impact Integrity (MVI): Low (L)
  • Modified Vulnerable System Impact Availability (MVA): High (H)
  • Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
  • Modified Subsequent System Impact Integrity (MSI): Low (L)
  • Modified Subsequent System Impact Availability (MSA): High (H)
  • Safety (S): Not Defined (X)
  • Automatable (AU): Not Defined (X)
  • Recovery (R): Not Defined (X)
  • Value Density (V): Not Defined (X)
  • Vulnerability Response Effort (RE): Not Defined (X)
  • Provider Urgency (U): Not Defined (X)
  • Confidentiality Req. (CR): Not Defined (X)
  • Integrity Req. (IR): Not Defined (X)
  • Availability Req. (AR): Not Defined (X)
updated 5 hours ago by @LeSuisse Activity log
  • Created suggestion 15 hours ago
  • @LeSuisse ignored
    13 packages
    • hdf5_1_10
    • hdf5-blosc
    • hdf5-fortran
    • hdf5-threadsafe
    • hdf5-fortran-mpi
    • hdf5-mpi
    • pkgsRocm.hdf5-mpi
    • hdf5-cpp
    • python313Packages.hdf5plugin
    • python314Packages.hdf5plugin
    • pkgsRocm.hdf5-fortran-mpi
    • haskellPackages.hdf5-lite
    • haskellPackages.hdf5
    5 hours ago
  • @LeSuisse restored
    2 packages
    • hdf5-cpp
    • hdf5-mpi
    5 hours ago
  • @LeSuisse accepted 5 hours ago
  • @LeSuisse published on GitHub 5 hours ago
HDF5 SOHM List Index Heap Buffer Overflow

Heap-based buffer overflow in the SOHM list-index deserialization code in HDF5 through 2.1.1 on all platforms allows attackers to cause a denial of service (crash) via a crafted HDF5 file whose shared-message list index declares a num_messages count exceeding list_max, triggering out-of-bounds heap reads and writes in H5SM__cache_list_deserialize and H5SM__cache_list_verify_chksum.

Affected products

HDF5
  • ==<= 2.1.1

Matching in nixpkgs

pkgs.hdf5

Data model, library, and file format for storing and managing data

pkgs.hdf5-cpp

Data model, library, and file format for storing and managing data

pkgs.hdf5-mpi

Data model, library, and file format for storing and managing data

Ignored packages (11)

pkgs.hdf5-blosc

Filter for HDF5 that uses the Blosc compressor

Package maintainers

Permalink CVE-2026-17574
5.2 MEDIUM
  • CVSS version (CVSS): 4.0
  • Attack Vector (AV): Local (L)
  • Attack Complexity (AC): Low (L)
  • Attack Requirement (AT): None (N)
  • Privileges Required (PR): None (N)
  • User Interaction (UI): Active (A)
  • Vulnerable System Impact Confidentiality (VC): None (N)
  • Vulnerable System Impact Integrity (VI): None (N)
  • Vulnerable System Impact Availability (VA): High (H)
  • Subsequent System Impact Confidentiality (SC): None (N)
  • Subsequent System Impact Integrity (SI): None (N)
  • Subsequent System Impact Availability (SA): None (N)
  • Exploit Maturity (E): POC (P)
  • Modified Attack Vector (MAV): Local (L)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Attack Requirement (MAT): None (N)
  • Modified Privileges Required (MPR): None (N)
  • Modified User Interaction (MUI): Active (A)
  • Modified Vulnerable System Impact Confidentiality (MVC): None (N)
  • Modified Vulnerable System Impact Integrity (MVI): None (N)
  • Modified Vulnerable System Impact Availability (MVA): High (H)
  • Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
  • Modified Subsequent System Impact Integrity (MSI): Negligible (N)
  • Modified Subsequent System Impact Availability (MSA): Negligible (N)
  • Safety (S): Not Defined (X)
  • Automatable (AU): Not Defined (X)
  • Recovery (R): Not Defined (X)
  • Value Density (V): Not Defined (X)
  • Vulnerability Response Effort (RE): Not Defined (X)
  • Provider Urgency (U): Not Defined (X)
  • Confidentiality Req. (CR): Not Defined (X)
  • Integrity Req. (IR): Not Defined (X)
  • Availability Req. (AR): Not Defined (X)
updated 5 hours ago by @LeSuisse Activity log
  • Created suggestion 15 hours ago
  • @LeSuisse ignored
    11 packages
    • hdf5_1_10
    • hdf5-blosc
    • hdf5-fortran
    • hdf5-threadsafe
    • hdf5-fortran-mpi
    • pkgsRocm.hdf5-mpi
    • haskellPackages.hdf5
    • haskellPackages.hdf5-lite
    • pkgsRocm.hdf5-fortran-mpi
    • python313Packages.hdf5plugin
    • python314Packages.hdf5plugin
    5 hours ago
  • @LeSuisse accepted 5 hours ago
  • @LeSuisse published on GitHub 5 hours ago
NULL Pointer Dereference in HDF5 via Invalid Variable-Length Datatype Type Tag

HDF5 contains a NULL pointer dereference vulnerability. Processing a crafted HDF5 file containing an attribute with an invalid variable-length datatype type field may cause the application to crash when the attribute is read.

Affected products

HDF5
  • ==<= 2.1.1

Matching in nixpkgs

pkgs.hdf5

Data model, library, and file format for storing and managing data

pkgs.hdf5-cpp

Data model, library, and file format for storing and managing data

pkgs.hdf5-mpi

Data model, library, and file format for storing and managing data

Ignored packages (11)

pkgs.hdf5-blosc

Filter for HDF5 that uses the Blosc compressor

Package maintainers

Permalink CVE-2026-17573
4.0 MEDIUM
  • CVSS version (CVSS): 4.0
  • Attack Vector (AV): Local (L)
  • Attack Complexity (AC): Low (L)
  • Attack Requirement (AT): None (N)
  • Privileges Required (PR): None (N)
  • User Interaction (UI): Active (A)
  • Vulnerable System Impact Confidentiality (VC): None (N)
  • Vulnerable System Impact Integrity (VI): None (N)
  • Vulnerable System Impact Availability (VA): High (H)
  • Subsequent System Impact Confidentiality (SC): None (N)
  • Subsequent System Impact Integrity (SI): None (N)
  • Subsequent System Impact Availability (SA): None (N)
  • Exploit Maturity (E): Unreported (U)
  • Modified Attack Vector (MAV): Local (L)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Attack Requirement (MAT): None (N)
  • Modified Privileges Required (MPR): None (N)
  • Modified User Interaction (MUI): Active (A)
  • Modified Vulnerable System Impact Confidentiality (MVC): None (N)
  • Modified Vulnerable System Impact Integrity (MVI): None (N)
  • Modified Vulnerable System Impact Availability (MVA): High (H)
  • Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
  • Modified Subsequent System Impact Integrity (MSI): Negligible (N)
  • Modified Subsequent System Impact Availability (MSA): Negligible (N)
  • Safety (S): Not Defined (X)
  • Automatable (AU): Not Defined (X)
  • Recovery (R): Not Defined (X)
  • Value Density (V): Not Defined (X)
  • Vulnerability Response Effort (RE): Not Defined (X)
  • Provider Urgency (U): Not Defined (X)
  • Confidentiality Req. (CR): Not Defined (X)
  • Integrity Req. (IR): Not Defined (X)
  • Availability Req. (AR): Not Defined (X)
updated 5 hours ago by @LeSuisse Activity log
  • Created suggestion 15 hours ago
  • @LeSuisse ignored
    11 packages
    • hdf5_1_10
    • hdf5-blosc
    • hdf5-fortran
    • hdf5-threadsafe
    • hdf5-fortran-mpi
    • pkgsRocm.hdf5-mpi
    • haskellPackages.hdf5
    • haskellPackages.hdf5-lite
    • pkgsRocm.hdf5-fortran-mpi
    • python313Packages.hdf5plugin
    • python314Packages.hdf5plugin
    5 hours ago
  • @LeSuisse accepted 5 hours ago
  • @LeSuisse published on GitHub 5 hours ago
Double Free in H5D__chunk_copy() in HDF5 via a Crafted Chunk-Index Size Field

A double free vulnerability was discovered in the HDF5 library. Processing a crafted HDF5 file containing an oversized chunk size field via h5repack may cause the application to abort due to a double free.

Affected products

HDF5
  • ==<= 2.1.1

Matching in nixpkgs

pkgs.hdf5

Data model, library, and file format for storing and managing data

pkgs.hdf5-cpp

Data model, library, and file format for storing and managing data

pkgs.hdf5-mpi

Data model, library, and file format for storing and managing data

Ignored packages (11)

pkgs.hdf5-blosc

Filter for HDF5 that uses the Blosc compressor

Package maintainers