HDF5 Library through 1.14.3 has a heap-based buffer over-read in H5VMmemcpyvv in H5VM.c (called from H5Dcompactreadvv in H5Dcompact.c).
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-40556.json"