4.8
Medium
CVE-2025-2925 A vulnerability has been found in HDF5 up to 1.14.6 and classified as problematic
Description
A vulnerability has been found in HDF5 up to 1.14.6 and classified as problematic. This vulnerability affects the function H5MM_realloc of the file src/H5MM.c. The manipulation of the argument mem leads to double free. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HDF5 1.14 | 1.14.0 → 1.14.6 | No fix stated |
References
- VDB-301900 | HDF5 H5MM.c H5MM_realloc double free vuldb.com
- VDB-301900 | CTI Indicators (IOB, IOC, IOA) vuldb.com
- Submit #521193 | https://github.com/HDFGroup/hdf5 HDF5 1.14.6 Double Free vuldb.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of HDF5
The 25 CVEs of HDF5 →
CVE-2025-7069
A vulnerability, which was classified as problematic, was found in HDF5 1.14.6
4.8
Medium
CVE-2025-7068
A vulnerability, which was classified as problematic, has been found in HDF5 1.14.6
4.8
Medium
CVE-2025-7067
A vulnerability classified as problematic was found in HDF5 1.14.6
4.8
Medium
CVE-2025-6858
A vulnerability was found in HDF5 1.14.6 and classified as problematic
4.8
Medium