https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 19:54:25 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-349029 EUVD-2026-349029 https://cve.radiocsirt.org/vuln/euvd-2026-349029 https://cve.radiocsirt.org/vuln/fkie_cve-2026-19024 <p>NULL pointer dereference in H5Pget_fill_value in HDF5 before 2.3.0 allows attackers to cause a denial of service via a dataset whose version 1 or 2 fill value message has the &#34;defined&#34; flag set together with a negative size field, which is not normalized to the library&#39;s &#34;undefined&#34; sentinel and reaches H5T_path_find with a NULL datatype.</p> <p>NULL pointer dereference in H5Pget_fill_value in HDF5 before 2.3.0 allows attackers to cause a denial of service via a dataset whose version 1 or 2 fill value message has the &#34;defined&#34; flag set together with a negative size field, which is not normalized to the library&#39;s &#34;undefined&#34; sentinel and reaches H5T_path_find with a NULL datatype.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-19024 https://cve.radiocsirt.org/vuln/ghsa-c7cf-qx8c-5ph7 <p>NULL pointer dereference in H5Pget_fill_value in HDF5 before 2.1.1 allows attackers to cause a denial of service via a dataset whose version 1 or 2 fill value message has the &#34;defined&#34; flag set together with a negative size field, which is not normalized to the library&#39;s &#34;undefined&#34; sentinel and reaches H5T_path_find with a NULL datatype.</p> <p>NULL pointer dereference in H5Pget_fill_value in HDF5 before 2.1.1 allows attackers to cause a denial of service via a dataset whose version 1 or 2 fill value message has the &#34;defined&#34; flag set together with a negative size field, which is not normalized to the library&#39;s &#34;undefined&#34; sentinel and reaches H5T_path_find with a NULL datatype.</p> https://cve.radiocsirt.org/vuln/ghsa-c7cf-qx8c-5ph7 https://cve.radiocsirt.org/vuln/msrc_cve-2026-19024 msrc_CVE-2026-19024 https://cve.radiocsirt.org/vuln/msrc_cve-2026-19024 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-19024 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: hdf5, Ubuntu:Pro:16.04:LTS: hdf5, Ubuntu:Pro:18.04:LTS: hdf5, Ubuntu:Pro:20.04:LTS: hdf5, Ubuntu:22.04:LTS: hdf5, Ubuntu:24.04:LTS: hdf5, Ubuntu:26.04:LTS: hdf5</p> <p>NULL pointer dereference in H5Pget_fill_value in HDF5 before 2.3.0 allows attackers to cause a denial of service via a dataset whose version 1 or 2 fill value message has the &#34;defined&#34; flag set together with a negative size field, which is not normalized to the library&#39;s &#34;undefined&#34; sentinel and reaches H5T_path_find with a NULL datatype.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: hdf5, Ubuntu:Pro:16.04:LTS: hdf5, Ubuntu:Pro:18.04:LTS: hdf5, Ubuntu:Pro:20.04:LTS: hdf5, Ubuntu:22.04:LTS: hdf5, Ubuntu:24.04:LTS: hdf5, Ubuntu:26.04:LTS: hdf5</p> <p>NULL pointer dereference in H5Pget_fill_value in HDF5 before 2.3.0 allows attackers to cause a denial of service via a dataset whose version 1 or 2 fill value message has the &#34;defined&#34; flag set together with a negative size field, which is not normalized to the library&#39;s &#34;undefined&#34; sentinel and reaches H5T_path_find with a NULL datatype.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-19024