PT-2026-39365

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5T ref mem setnull in H5Tref.c called from H5T conv ref in H5Tconv.c, resulting in the corruption of the instruction pointer...

PT-2026-39399

HDF5 is software for managing data. In 1.14.1-2 and earlier, an attacker who can control an h5 file parsed by HDF5 can trigger a write-based heap buffer overflow condition in the H5T ref mem setnull method. This can lead to a denial-of-service condition, and potentially further issues such as...