PT-2026-91804

Unidata netcdf-c through 4.10.1 contains an out-of-bounds write vulnerability in NC4 HDF5 inq attname that copies HDF5 attribute names into a fixed 256-byte buffer without length validation. Attackers can craft HDF5 files with oversized attribute names to overflow the destination buffer, causing...