VULNERABILITY INTELLIGENCE
CVE-2026-19023
EPSS probability0.17%
CISA KEVNot currently listed
Published2026-08-05
Last modified2026-10-23
Description
Untrusted pointer dereference in the render_bin_output function in the h5dump tool in HDF5 before 2.3.0 allows attackers to cause a denial of service via a variable-length string dataset with more than one element dumped in binary mode, which corrupts the per-element stride calculation and causes subsequent elements to be read from a misaligned offset and dereferenced as a pointer.
Weakness classification
- 0253b833-3e77-4dfe-9d57-17db1a2f0a74: CWE-822