CVE-2026-19024
CVE-2026-19024: 1 tracked advisory record across Red Hat. Compare vendor sources and published fix guidance.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
Red Hat
1 advisory- Advisory severityMedium5.5
Medium [CVE-2026-19024] Denial of service via malformed dataset
CVE-2026-19024Source published Source updated
NULL pointer dereference in H5Pget_fill_value in HDF5 before 2.3.0 allows attackers to cause a denial of service via a dataset whose version 1 or 2 fill value message has the "defined" flag set together with a negative size field, which is not normalized to the library's "undefined" sentinel and reaches H5T_path_find with a NULL datatype. A flaw was found in HDF5. A local attacker could exploit a vulnerability in the `H5Pget_fill_value` function by providing a specially crafted dataset. This could lead to a denial of service, making the system unavailable. When this unnormalized structure is evaluated, it passes a NULL datatype pointer to H5T_path_find, resulting in a NULL pointer dereference. Successful exploitation causes the calling application process to terminate abruptly, resulting…
- Affected products in this advisory
- Red Hat Hardened Images
- Red Hat Enterprise Linux AI (RHEL AI) 3
- Source-reported affected versions
- < 2.3.0
- Source-reported fixed versions
- hdf5-main-2.2.0-0.1.3.hum1
- RHSA-2026:79131
- Mitigation guidance
- To reduce risk prior to patching, restrict processing HDF5 files from untrusted sources, or run file-parsing workflows within isolated, unprivileged worker processes to prevent a potential crash from impacting core operations.
Android app · Google Play
Monitor future Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.