CVEs published by HDFG

CVEs published by HDFG (CVE Numbering Authority). 6 tracked.

CVE-2026-19024 HIGH 8.2 NULL pointer dereference in H5Pget_fill_value in HDF5 before 2.3.0 allows attackers to cause a denial of servi
CVE-2026-19026 MEDIUM 6.8 H5Z__filter_nbit in H5Znbit.c in HDF5 prior to 2.3.0 dereferences cd_values[0] through cd_values[4] without va
CVE-2026-19027 MEDIUM 6.9 The H5Z__nbit_decompress_one_byte, H5Z__nbit_decompress_one_nooptype, and H5Z__nbit_decompress_one_atomic func
CVE-2026-19028 MEDIUM 6.8 H5Z__filter_fletcher32 in H5Zfletcher32.c in HDF5 prior to 2.3.0 computes the data length to checksum by subtr
CVE-2026-19023 MEDIUM 6.8 Untrusted pointer dereference in the render_bin_output function in the h5dump tool in HDF5 before 2.3.0 allows
CVE-2026-19025 MEDIUM 6.8 H5O__layout_decode in H5Olayout.c in HDF5 through 2.3.0 does not validate that a chunked dataset's stored chun