CVE-2026-19024 HIGH

CVE-2026-19024: HDF5 H5Pget_fill_value NULL Pointer Dereference via Malformed Fill Value Message

Vendor The Hdf Group
Product HDF5
Weakness CWE-476
Published August 5, 2026
Last update August 6, 2026
View on NVD All CVEs

CVSS base score

8.2/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H

What the vulnerability does

01Description

NULL pointer dereference in H5Pget_fill_value in HDF5 before 2.3.0 allows attackers to cause a denial of service via a dataset whose version 1 or 2 fill value message has the "defined" flag set together with a negative size field, which is not normalized to the library's "undefined" sentinel and reaches H5T_path_find with a NULL datatype.

Key dates

02Disclosure timeline

August 5, 2026 CVE published
August 6, 2026 Record updated