Vendor
Unidata netcdf-c through version 4.10.1 contains an out-of-bounds write vulnerability in the NC4_HDF5_inq_attname function that can lead to memory corruption and application crashes.