2.3
Low
CVE-2025-2153 A vulnerability, which was classified as critical, was found in HDF5 1.14.6
Description
A vulnerability, which was classified as critical, was found in HDF5 1.14.6. Affected is the function H5SM_delete of the file H5SM.c of the component h5 File Handler. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HDF5 | 1.14.6 | No fix stated |
References
- VDB-299064 | HDF5 h5 File H5SM.c H5SM_delete heap-based overflow vuldb.com
- VDB-299064 | CTI Indicators (IOB, IOC, IOA) vuldb.com
- Submit #510819 | https://github.com/HDFGroup/hdf5 hfd5 v1.14.6 Heap-based Buffer Overflow vuldb.com
- github.com github.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of HDF5
The 25 CVEs of HDF5 →
CVE-2025-7069
A vulnerability, which was classified as problematic, was found in HDF5 1.14.6
4.8
Medium
CVE-2025-7068
A vulnerability, which was classified as problematic, has been found in HDF5 1.14.6
4.8
Medium
CVE-2025-7067
A vulnerability classified as problematic was found in HDF5 1.14.6
4.8
Medium
CVE-2025-6858
A vulnerability was found in HDF5 1.14.6 and classified as problematic
4.8
Medium