CVE-2025-2914
HDF5 H5FScache.c H5FS__sinfo_Srialize_Sct_cb heap-based overflow
Summary
HDF5 H5FScache.c H5FS__sinfo_Srialize_Sct_cb heap-based overflow
Original description
The description as published by the source.
A vulnerability classified as problematic has been found in HDF5 up to 1.14.6. This affects the function H5FS__sinfo_Srialize_Sct_cb of the file src/H5FScache.c. The manipulation of the argument sect leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2025-2914 hdf5
- Ubuntu UBUNTU-CVE-2025-2914 hdf5
References
- advisory github.com
- advisory nvd.nist.gov
- advisory vuldb.com
- advisory vuldb.com
- report github.com
- report vuldb.com