CVE-2026-19025

The CVE-2026-19025 entry concerns HDF5 versions up to 2.3.0. It describes a flaw in H5O__layout_decode within H5Olayout.c where a chunked dataset’s stored chunk-layout dimensionality is not validated against its dataspace rank when an existing dataset is opened (validation exists only at dataset ...