Out-of-bounds Read in The Hdf Group Hdf5

CVE-2026-19028

H5Z__filter_fletcher32 in H5Zfletcher32.c in HDF5 through 2.3.0 computes the data length to checksum by subtracting the 4-byte trailing checksum size from the input buffer size without checking that the buffer is at least 4 bytes, allowing…

Vulnerability class: Buffer Overflow

Affected products

Weakness classification (CWE)

References