CVE-2026-19023

Name of the Vulnerable Software and Affected Versions HDF5 versions prior to 2.3.0

Description An untrusted pointer dereference exists in the render bin output() function of the h5dump tool. This occurs when a variable-length string dataset containing more than one element is dumped in binary mode. The issue corrupts the per-element stride calculation, leading subsequent elements to be read from a misaligned offset and dereferenced as a pointer, which can result in a denial of service.

Recommendations Update HDF5 to version 2.3.0 or later. As a temporary workaround, avoid using the render bin output() function to dump variable-length string datasets in binary mode.