Hdf5 · Hdf5 · CVE-2021-46242
**Name of the Vulnerable Software and Affected Versions**
HDF5 version 1.13.1-1
**Description**
The issue is related to a null pointer dereference in the H5AC unpin entry component of the HDF5 library. Exploitation of this issue may allow a remote attacker to impact the confidentiality, integrity, and availability of information. It is also described as a heap-use-after-free vulnerability via the H5AC unpin entry component.
**Recommendations**
For HDF5 version 1.13.1-1, as a temporary workaround, consider disabling the `H5AC unpin entry` function until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.