CVE-2026-120689

HDF5 through 2.2.0 contains an uncontrolled recursion vulnerability in H5Biteratehelper in src/H5B.c. When iterating a version 1 B-tree, the function does not verify that a child node’s level matches the expected level. That check is performed only in H5Bcachedeserialize when a node is first load...