szip_filter vulnerabilities

CVEs whose affected-version data names the szip_filter package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-120755Medium· 4.7

5d ago

Integer Underflow Leads to Out-of-Bounds Read via Truncated Chunk in HDF5 Szip Filter

HDF5 through 2.2.0 contains an out-of-bounds read vulnerability in H5Z__filter_szip() in src/H5Zszip.c. When decoding a szip-compressed chunk, the function subtracts the 4-byte uncompressed-length header from the chunk length without fir…

▾ SunlitThe HDF Group · Szip FilterEPSS 0.14%via CVEORG