Threats tagged 'ghsa-c7cf-qx8c-5ph7'

A NULL pointer dereference vulnerability exists in the H5Pget_fill_value function of HDF5 versions before 2.1.1. This flaw can be triggered by a dataset whose version 1 or 2 fill value message has the "defined" flag set along with a negative size field, leading to a NULL datatype being passed internally and causing a denial of service.