https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-22T16:59:26.532632+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-19024 fkie_cve-2026-19024 2026-10-22T16:59:26.574321+00:00

NULL pointer dereference in H5Pget_fill_value in HDF5 before 2.3.0 allows attackers to cause a denial of service via a dataset whose version 1 or 2 fill value message has the "defined" flag set together with a negative size field, which is not normalized to the library's "undefined" sentinel and reaches H5T_path_find with a NULL datatype.

 https://db.gcve.eu/vuln/ghsa-c7cf-qx8c-5ph7 GHSA-c7cf-qx8c-5ph7 2026-10-22T16:59:26.574426+00:00

NULL pointer dereference in H5Pget_fill_value in HDF5 before 2.1.1 allows attackers to cause a denial of service via a dataset whose version 1 or 2 fill value message has the "defined" flag set together with a negative size field, which is not normalized to the library's "undefined" sentinel and reaches H5T_path_find with a NULL datatype.

 https://db.gcve.eu/vuln/msrc_cve-2026-19024 msrc_CVE-2026-19024 — HDF5 H5Pget_fill_value NULL Pointer Dereference via Malformed Fill Value Message 2026-10-22T16:59:26.574459+00:00 msrc_CVE-2026-19024 https://db.gcve.eu/vuln/oesa-2026-4459 OESA-2026-4459 — hdf5 security update 2026-10-22T16:59:26.574495+00:00

Affected: openEuler:22.03-LTS-SP4: hdf5

HDF5 is a data model, library, and file format for storing and managing data. It supports an unlimited variety of datatypes, and is designed for flexible and efficient I/O and for high volume and complex data. HDF5 is portable and is extensible, allowing applications to evolve in their use of HDF5. The HDF5 Technology suite includes tools and applications for managing, manipulating, viewing, and analyzing data in the HDF5 format. Security Fix(es):

Untrusted pointer dereference in the render_bin_output function in the h5dump tool in HDF5 before 2.1.1 allows attackers to cause a denial of service via a variable-length string dataset with more than one element dumped in binary mode, which corrupts the per-element stride calculation and causes subsequent elements to be read from a misaligned offset and dereferenced as a pointer.(CVE-2026-19023)

NULL pointer dereference in H5Pget_fill_value in HDF5 before 2.1.1 allows attackers to cause a denial of service via a dataset whose version 1 or 2 fill value message has the "defined" flag set together with a negative size field, which is not normalized to the library's "undefined" sentinel and reaches H5T_path_find with a NULL datatype.(CVE-2026-19024)

H5Z__filter_nbit in H5Znbit.c in HDF5 through 2.3.0 dereferences cd_values[0] through cd_values[4] without validating that cd_values is non-NULL or that cd_nelmts is at least 5, the fixed size of the filter's header. This allows attackers to cause a den…

 https://db.gcve.eu/vuln/rhsa-2026:79131 RHSA-2026:79131 — Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update 2026-10-22T16:59:26.574589+00:00

hdf5: HDF5: Denial of service via malformed dataset

 https://db.gcve.eu/vuln/ubuntu-cve-2026-19024 UBUNTU-CVE-2026-19024 2026-10-22T16:59:26.574624+00:00

Affected: Ubuntu:Pro:14.04:LTS: hdf5, Ubuntu:Pro:16.04:LTS: hdf5, Ubuntu:Pro:18.04:LTS: hdf5, Ubuntu:Pro:20.04:LTS: hdf5, Ubuntu:22.04:LTS: hdf5, Ubuntu:24.04:LTS: hdf5, Ubuntu:26.10: hdf5, Ubuntu:26.04:LTS: hdf5

NULL pointer dereference in H5Pget_fill_value in HDF5 before 2.3.0 allows attackers to cause a denial of service via a dataset whose version 1 or 2 fill value message has the "defined" flag set together with a negative size field, which is not normalized to the library's "undefined" sentinel and reaches H5T_path_find with a NULL datatype.