Skip to content
CVE PROGRAM SOURCE RECORD5.2 Medium

CVE-2026-17574

NULL Pointer Dereference in HDF5 via Invalid Variable-Length Datatype Type Tag

Description

HDF5 contains a NULL pointer dereference vulnerability. Processing a crafted HDF5 file containing an attribute with an invalid variable-length datatype type field may cause the application to crash when the attribute is read.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

The HDF Group HDF5

Default version status: unaffected

  • <= 2.1.1affected

References