https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T10:55:51.457784+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-348930 EUVD-2026-348930 2026-10-02T10:55:51.461676+00:00 EUVD-2026-348930 https://cve.radiocsirt.org/vuln/fkie_cve-2026-19026 fkie_cve-2026-19026 2026-10-02T10:55:51.461711+00:00

H5Z__filter_nbit in H5Znbit.c in HDF5 through 2.3.0 dereferences cd_values[0] through cd_values[4] without validating that cd_values is non-NULL or that cd_nelmts is at least 5, the fixed size of the filter's header. This allows attackers to cause a denial of service via a crafted HDF5 file that stores the N-Bit filter pipeline message with zero client-data values, opened and read via H5Dread, e.g. by the h5ls or h5repack tools.

 https://cve.radiocsirt.org/vuln/ghsa-fr64-5gr2-c3jj GHSA-fr64-5gr2-c3jj 2026-10-02T10:55:51.461745+00:00

H5Z__filter_nbit in H5Znbit.c in HDF5 through 2.3.0 dereferences cd_values[0] through cd_values[4] without validating that cd_values is non-NULL or that cd_nelmts is at least 5, the fixed size of the filter's header. This allows attackers to cause a denial of service via a crafted HDF5 file that stores the N-Bit filter pipeline message with zero client-data values, opened and read via H5Dread, e.g. by the h5ls or h5repack tools.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-19026 msrc_CVE-2026-19026 — Nbit filter NULL/short parameter-array dereference 2026-10-02T10:55:51.461764+00:00 msrc_CVE-2026-19026 https://cve.radiocsirt.org/vuln/rhsa-2026:73539 RHSA-2026:73539 — Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update 2026-10-02T10:55:51.461780+00:00

hdf5: HDF5: Denial of service via crafted HDF5 file hdf5: HDF5: Information disclosure and denial of service via crafted HDF5 file hdf5: HDF5: Denial of Service via integer underflow in Fletcher32 filter

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-19026 UBUNTU-CVE-2026-19026 2026-10-02T10:55:51.461799+00:00

Affected: Ubuntu:Pro:14.04:LTS: hdf5, Ubuntu:Pro:16.04:LTS: hdf5, Ubuntu:Pro:18.04:LTS: hdf5, Ubuntu:Pro:20.04:LTS: hdf5, Ubuntu:22.04:LTS: hdf5, Ubuntu:24.04:LTS: hdf5, Ubuntu:26.04:LTS: hdf5

H5Z__filter_nbit in H5Znbit.c in HDF5 through 2.3.0 dereferences cd_values[0] through cd_values[4] without validating that cd_values is non-NULL or that cd_nelmts is at least 5, the fixed size of the filter's header. This allows attackers to cause a denial of service via a crafted HDF5 file that stores the N-Bit filter pipeline message with zero client-data values, opened and read via H5Dread, e.g. by the h5ls or h5repack tools.