CVE-2025-2915
HDF5 H5Faccum.c H5F__accum_free heap-based overflow
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
HDF5 H5Faccum.c H5F__accum_free heap-based overflow
A vulnerability classified as problematic was found in HDF5 up to 1.14.6. This vulnerability affects the function H5F__accum_free of the file src/H5Faccum.c. The manipulation of the argument overlap_size leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.
In HDF5 bis 1.14.6 wurde eine Schwachstelle entdeckt. Sie wurde als problematisch eingestuft. Dabei geht es um die Funktion H5F__accum_free der Datei src/H5Faccum.c. Durch Manipulation des Arguments overlap_size mit unbekannten Daten kann eine heap-based buffer overflow-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs hat dabei lokal zu erfolgen. Der Exploit steht zur öffentlichen Verfügung.
| 2025-03-28: | Advisory disclosed |
| 2025-03-28: | VulDB entry created |
| 2025-03-28: | VulDB entry last update |
vuldb.com/?id.301888 (VDB-301888 | HDF5 H5Faccum.c H5F__accum_free heap-based overflow)
vuldb.com/?ctiid.301888 (VDB-301888 | CTI Indicators (IOB, IOC, IOA))
vuldb.com/?submit.520899 (Submit #520899 | https://github.com/HDFGroup/hdf5 HDF5 v1.14.6 Heap-based Buffer Overflow)
github.com/HDFGroup/hdf5/issues/5380
Support options
