A NULL pointer dereference was discovered in H5Shypermake_spans in H5Shyper.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-11202.json"