CVE-2016-4331: Hdfgroup HDF5

High severity, CVSS 8.6. EPSS: 0.8% chance of exploitation in the next 30 days.

When decoding data out of a dataset encoded with the H5Z_NBIT decoding, the HDF5 1.8.16 library will fail to ensure that the precision is within the bounds of the size leading to arbitrary code execution.

Affected products

• Hdfgroup HDF5: version 1.8.16 only

Published 2016-11-18. Last modified 2026-06-17.