yocto ▾
›
master ▾
›
vulnerability
›
CVE-2026-17574
Component Overview
Vulnerability Overview
Name
CVE-2026-17574
Source
NVD (
link
)
Debian (
link
)
Description
HDF5 contains a NULL pointer dereference vulnerability. Processing a crafted HDF5 file containing an attribute with an invalid variable-length datatype type field may cause the application to crash when the attribute is read.
CWEs
CWE-476
Published Date
Jul 27, 2026
Updated Date
Aug 18, 2026
Workaround
-
Advisories
https://github.com/HDFGroup/hdf5/commit/3fa6ed6e9dfeebbc784e21d8c48e31e35a8042bc
Patch
Analysis
#
Affected Component
Analysis
hdf5
Exploitable
Vulnerability Ratings
#
5.2
CVSSv4
5.5
CVSSv31
NaN
other
Others affected components
#
Name
Project
Project Version
Version
Status
hdf5
yocto
kirkstone
1.8.21
Exploitable
hdf5
yocto
scarthgap
1.14.4-3
Exploitable