HDF5 contains a NULL pointer dereference vulnerability. Processing a crafted HDF5 file containing an attribute with an invalid variable-length datatype type field may cause the application to crash when the attribute is read.

A flaw was found in HDF5. A local user can exploit this vulnerability by processing a specially crafted HDF5 file. This file, containing an attribute with an invalid variable-length datatype, can cause a NULL pointer dereference, leading to an application crash and resulting in a denial of service.

This Moderate impact denial of service vulnerability in HDF5 can lead to an application crash when processing a specially crafted HDF5 file. This issue affects Red Hat products that utilize HDF5 for data handling, requiring user interaction to process the malicious file. Red Hat AI Inference Server Fix deferred rhaii/model-opt-cuda-rhel9 Red Hat AI Inference Server Fix deferred rhaiis/model-opt-cuda-rhel9 Red Hat AI Inference Server Fix deferred rhaiis/vllm-cpu-rhel9 Red Hat AI Inference Server Fix deferred rhaiis/vllm-cuda-rhel9 Red Hat AI Inference Server Fix deferred rhaiis/vllm-neuron-rhel9 Red Hat AI Inference Server Fix deferred rhaiis/vllm-rocm-rhel9 Red Hat AI Inference Server Fix deferred rhaiis/vllm-spyre-rhel9 Red Hat AI Inference Server Fix deferred rhaiis/vllm-tpu-rhel9 Red Hat AI Inference Server Fix deferred rhaii/vllm-cpu-rhel9 Red Hat AI Inference Server Fix deferred rhaii/vllm-cuda-rhel9 Red Hat AI Inference Server Fix deferred rhaii/vllm-gaudi-rhel9 Red Hat AI Inference Server Fix deferred rhaii/vllm-neuron-rhel9 Red Hat AI Inference Server Fix deferred rhaii/vllm-rocm-rhel9 Red Hat AI Inference Server Fix deferred rhaii/vllm-spyre-rhel9 Red Hat AI Inference Server Fix deferred rhaii/vllm-tpu-rhel9 Red Hat Enterprise Linux AI (RHEL AI) 3 Fix deferred hdf5 Red Hat OpenShift AI (RHOAI) Fix deferred rhai/base-image-cpu-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhai/base-image-cuda-12.9-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhai/base-image-cuda-13.0-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhai/base-image-gaudi-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhai/base-image-neuron-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhai/base-image-rocm-6.4-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhai/base-image-rocm-7.0-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhai/base-image-rocm-7.1-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhai/base-image-spyre-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhai/base-image-tpu-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-automl-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-autorag-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-kserve-autogluon-server-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-llama-stack-core-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-llm-d-kv-cache-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-mlserver-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-spark-operator-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-th06-cpu-torch210-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-th06-cpu-torch291-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-th06-cuda130-torch210-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-th06-cuda130-torch291-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-th06-rocm64-torch291-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9 https://www.cve.org/CVERecord?id=CVE-2026-17574 https://nvd.nist.gov/vuln/detail/CVE-2026-17574 https://github.com/HDFGroup/hdf5/commit/3fa6ed6e9dfeebbc784e21d8c48e31e35a8042bc