PT-2026-64977 · Hdf5 · Hdf5

CVE-2026-17574

·

Published

2026-07-27

·

Updated

2026-08-07

CVSS v4.0

6.7

Medium

VectorAV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions HDF5 (affected versions not specified)
Description A NULL pointer dereference occurs when processing a specially crafted HDF5 file. The issue is triggered when the application reads an attribute containing an invalid variable-length datatype type field, which can lead to an application crash.

Exploit

Fix

NULL Pointer Dereference

Assertion Failure

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-476CWE-617

Related Identifiers

AZL-94019
CVE-2026-17574
ECHO-8C91-0553-6384
OESA-2026-3259
OESA-2026-3260
OESA-2026-3261
OESA-2026-3262

Affected Products

Hdf5