An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5VM_memcpyvv in H5VM.c when called from H5D__compact_readvv in H5Dcompact.c.
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-9151.json"