Out-of-bounds Read in The Hdf Group Hdf5
CVE-2026-19028
H5Z__filter_fletcher32 in H5Zfletcher32.c in HDF5 through 2.3.0 computes the data length to checksum by subtracting the 4-byte trailing checksum size from the input buffer size without checking that the buffer is at least 4 bytes, allowing…
Vulnerability class: Buffer Overflow
Affected products
- The Hdf Group Hdf5 — versions <=2.3.0