CVE-2025-2912
HDF5 H5Omessage.c H5O_msg_flush heap-based overflow
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
HDF5 H5Omessage.c H5O_msg_flush heap-based overflow
A vulnerability was found in HDF5 up to 1.14.6. It has been declared as problematic. Affected by this vulnerability is the function H5O_msg_flush of the file src/H5Omessage.c. The manipulation of the argument oh leads to heap-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.
In HDF5 bis 1.14.6 wurde eine problematische Schwachstelle ausgemacht. Es geht um die Funktion H5O_msg_flush der Datei src/H5Omessage.c. Dank Manipulation des Arguments oh mit unbekannten Daten kann eine heap-based buffer overflow-Schwachstelle ausgenutzt werden. Der Angriff muss lokal angegangen werden. Der Exploit steht zur öffentlichen Verfügung.
| 2025-03-28: | Advisory disclosed |
| 2025-03-28: | VulDB entry created |
| 2025-03-28: | VulDB entry last update |
vuldb.com/?id.301885 (VDB-301885 | HDF5 H5Omessage.c H5O_msg_flush heap-based overflow)
vuldb.com/?ctiid.301885 (VDB-301885 | CTI Indicators (IOB, IOC, IOA))
vuldb.com/?submit.519966 (Submit #519966 | https://github.com/HDFGroup/hdf5 hfd5 v1.14.6 Heap-based Buffer Overflow)
github.com/HDFGroup/hdf5/issues/5370
Support options
