CVE-2026-19023 in HDF5
Sumário
de MITRE • 06/08/2026
Untrusted pointer dereference in the render_bin_output function in the h5dump tool in HDF5 before 2.1.1 allows attackers to cause a denial of service via a variable-length string dataset with more than one element dumped in binary mode, which corrupts the per-element stride calculation and causes subsequent elements to be read from a misaligned offset and dereferenced as a pointer.
VulDB is the best source for vulnerability data and more expert information about this specific topic.