Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2025-2914

HDF5 H5FScache.c H5FS__sinfo_Srialize_Sct_cb heap-based overflow

Description

A vulnerability classified as problematic has been found in HDF5 up to 1.14.6. This affects the function H5FS__sinfo_Srialize_Sct_cb of the file src/H5FScache.c. The manipulation of the argument sect leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a HDF5

  • 1.14.0affected
  • 1.14.1affected
  • 1.14.2affected
  • 1.14.3affected
  • 1.14.4affected
  • 1.14.5affected
  • 1.14.6affected

References