PT-2026-135668

HDF5 through 2.2.0 contains an uncontrolled recursion vulnerability in H5B iterate helper in src/H5B.c. When iterating a version 1 B-tree, the function does not verify that a child node’s level matches the expected level. That check is performed only in H5B cache deserialize when a node is first...