PT-2026-39348

Published

2026-04-29

Updated

2026-04-29

Description by

CVSS 3.1

8.8

High

MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

HDF5 Library through 1.14.3 has a heap-based buffer over-read in H5VM memcpyvv in H5VM.c (called from H5D compact readvv in H5Dcompact.c).

Exploitability

Fix

Vendors

Affected products

Related identifiers

JLSEC-2026-300

Found an issue in the description? Have something to add? Feel free to write us 👾