CVE-2026-19023

The record

Untrusted pointer dereference in the render_bin_output function in the h5dump tool in HDF5 before 2.3.0 allows attackers to cause a denial of service via a variable-length string dataset with more than one element dumped in binary mode, which corrupts the per-element stride calculation and causes subsequent elements to be read from a misaligned offset and dereferenced as a pointer.

Affected packages

Related vulnerabilities

• CVE-2026-83939 Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker… CWE-822
• CVE-2026-83498 Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave… CWE-822
• CVE-2026-80083 Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute… CWE-822
• CVE-2026-78451 Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an… CWE-822
• CVE-2026-78444 Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker… CWE-822
• CVE-2026-72956 Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized… CWE-822
• CVE-2026-10420 Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer… CWE-822
• CVE-2026-82927 Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer… CWE-822