CVE-2025-2926

CVE-2025-2926 affects HDF5 up to 1.14.6. The issue is a null pointer dereference in H5O__cache_chk_serialize (src/H5Ocache.c). Local access is required to exploit; exploitation has been disclosed publicly. OSV entries corroborate this CVE and note a fix is planned/available via a patched package ...

CVE-2025-2926 HDF5 H5Ocache.c H5O__cache_chk_serialize null pointer dereference

A vulnerability was found in HDF5 up to 1.14.6 and classified as problematic. This issue affects the function H5Ocachechkserialize of the file src/H5Ocache.c. The manipulation leads to null pointer dereference. An attack has to be approached locally. The exploit has been disclosed to the public a...

CVE-2017-17505

In HDF5 1.10.1, there is a NULL pointer dereference in the function H5Oplinedecode in the H5Opline.c file in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file...