Out-of-bounds Read in The Hdf Group Hdf5
CVE-2026-19027
The H5Z__nbit_decompress_one_byte, H5Z__nbit_decompress_one_nooptype, and H5Z__nbit_decompress_one_atomic functions in H5Znbit.c in HDF5 through 2.3.0 advance a read index into the compressed chunk buffer without bounding it against the bu…
Vulnerability class: Buffer Overflow
Affected products
- The Hdf Group Hdf5 — versions <=2.3.0