hdf/dataobject.c in libmysofa before 0.8 has an uninitialized use of memory, as demonstrated by mysofa2json.
{
"binaries": [
{
"binary_name": "libmysofa-dev",
"binary_version": "0.6~dfsg0-3+deb10u1ubuntu0.1~esm1"
},
{
"binary_name": "libmysofa-utils",
"binary_version": "0.6~dfsg0-3+deb10u1ubuntu0.1~esm1"
},
{
"binary_name": "libmysofa0",
"binary_version": "0.6~dfsg0-3+deb10u1ubuntu0.1~esm1"
}
]
}