Out-of-bounds Read in The Hdf Group Hdf5

CVE-2026-19027

The H5Z__nbit_decompress_one_byte, H5Z__nbit_decompress_one_nooptype, and H5Z__nbit_decompress_one_atomic functions in H5Znbit.c in HDF5 through 2.3.0 advance a read index into the compressed chunk buffer without bounding it against the bu…

Vulnerability class: Buffer Overflow

Affected products

Weakness classification (CWE)

References