CVE-2026-19026

The CVE-2026-19026 issue affects HDF5 up to v2.3.0, specifically H5Z__filter_nbit in H5Znbit.c. The code dereferences cd_values[0] through cd_values[4] without verifying that cd_values is non-NULL or that cd_nelmts >= 5, exploiting the fixed size of the filter header. This can cause a denial o...