PT-2026-39356 · Julia · Hdf5 Jll

Published

2026-04-29

·

Updated

2026-04-29

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5Z nbit decompress one byte in H5Znbit.c, caused by the earlier use of an initialized pointer.

Exploit

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

JLSEC-2026-310

Affected Products

Hdf5 Jll