A heap-buffer-overflow vulnerability exists in the H5L__extern_traverse function of the hdf5 library. This issue was identified by OSS-Fuzz and results in a read overflow on the heap. Multiple specific versions of hdf5 are affected, including 1.14.1 and several 2.x pre-release and release versions. No CVSS score or vendor patch information is currently available.