A flaw was found in HDF HDF5 1.10.2 library. An out of bounds read was discovered in H5VM_memcpyvv in H5VM.c. It could allow a remote denial of service or information disclosure attack.
Created hdf5 tracking bugs for this issue:
Affects: epel-all [bug 1579947]
Affects: fedora-all [bug 1579949]