CVE-2018-11202: Hdfgroup HDF5

Medium severity, CVSS 6.5. EPSS: 1.9% chance of exploitation in the next 30 days.

A NULL pointer dereference was discovered in H5S_hyper_make_spans in H5Shyper.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack.

Affected products

• Hdfgroup HDF5: version 1.10.2 only

Published 2018-05-16. Last modified 2026-06-17.