CVE-2026-19029

Name of the Vulnerable Software and Affected Versions HDF5 versions prior to 2.2.1

Description A heap-based buffer over-read occurs in the H5Z filter scaleoffset() function within src/H5Zscaleoffset.c. This issue allows an attacker to cause a denial of service resulting in an application crash by using a specially crafted HDF5 file. The flaw exists because the decoder copies d nelmts * size bytes from a compressed chunk without verifying if the chunk contains the required amount of data when the stored minimum bits match the full precision of the datatype. Both d nelmts and size are parameters controlled by the attacker within the dataset's filter pipeline message.

Recommendations Update to version 2.2.1 or later.