CVE-2026-120755

HDF5 versions through 2.2.0 are vulnerable to an out-of-bounds read in the H5Z__filter_szip() function within src/H5Zszip.c. The issue is caused by an integer underflow where the software subtracts a 4-byte uncompressed-length header from a chunk length without verifying the chunk is at least 4 b...