HDF5 versions through 2.2.0 have a NULL pointer dereference vulnerability in the H5HL_unprotect() function. This occurs when a corrupted local heap entry is destroyed, leading to a NULL pointer being passed to a cache unpinning function. Opening a crafted malicious HDF5 file can cause the application to crash, resulting in a denial of service.