HDF5 contains a NULL pointer dereference vulnerability. Processing a crafted HDF5 file containing an attribute with an invalid variable-length datatype type field may cause the application to crash when the attribute is read.
Exploitability
AV:LAC:LAT:NPR:NUI:AVulnerable System
VC:NVI:NVA:HSubsequent System
SC:NSI:NSA:N5.2/CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:PMemory Safety
Other