CVE-2026-120499 | h5io up to 0.2.5 HDF5 read_hdf5 code injection

November 5, 2026 Yanac

A vulnerability marked as problematic has been reported in h5io up to 0.2.5. The affected element is the function read_hdf5 of the component HDF5. Performing a manipulation results in code injection.

This vulnerability is reported as CVE-2026-120499. The attack requires a local approach. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More