https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T11:05:36.126833+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-349029 EUVD-2026-349029 2026-10-02T11:05:36.130488+00:00 EUVD-2026-349029 https://cve.radiocsirt.org/vuln/fkie_cve-2026-19024 fkie_cve-2026-19024 2026-10-02T11:05:36.130518+00:00

NULL pointer dereference in H5Pget_fill_value in HDF5 before 2.3.0 allows attackers to cause a denial of service via a dataset whose version 1 or 2 fill value message has the "defined" flag set together with a negative size field, which is not normalized to the library's "undefined" sentinel and reaches H5T_path_find with a NULL datatype.

 https://cve.radiocsirt.org/vuln/ghsa-c7cf-qx8c-5ph7 GHSA-c7cf-qx8c-5ph7 2026-10-02T11:05:36.130551+00:00

NULL pointer dereference in H5Pget_fill_value in HDF5 before 2.1.1 allows attackers to cause a denial of service via a dataset whose version 1 or 2 fill value message has the "defined" flag set together with a negative size field, which is not normalized to the library's "undefined" sentinel and reaches H5T_path_find with a NULL datatype.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-19024 msrc_CVE-2026-19024 — HDF5 H5Pget_fill_value NULL Pointer Dereference via Malformed Fill Value Message 2026-10-02T11:05:36.130570+00:00 msrc_CVE-2026-19024 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-19024 UBUNTU-CVE-2026-19024 2026-10-02T11:05:36.130586+00:00

Affected: Ubuntu:Pro:14.04:LTS: hdf5, Ubuntu:Pro:16.04:LTS: hdf5, Ubuntu:Pro:18.04:LTS: hdf5, Ubuntu:Pro:20.04:LTS: hdf5, Ubuntu:22.04:LTS: hdf5, Ubuntu:24.04:LTS: hdf5, Ubuntu:26.04:LTS: hdf5

NULL pointer dereference in H5Pget_fill_value in HDF5 before 2.3.0 allows attackers to cause a denial of service via a dataset whose version 1 or 2 fill value message has the "defined" flag set together with a negative size field, which is not normalized to the library's "undefined" sentinel and reaches H5T_path_find with a NULL datatype.