CVE-2025-2923
HDF5 H5Fint.c H5F_addr_encode_len heap-based overflow
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
HDF5 H5Fint.c H5F_addr_encode_len heap-based overflow
A vulnerability, which was classified as problematic, has been found in HDF5 up to 1.14.6. Affected by this issue is the function H5F_addr_encode_len of the file src/H5Fint.c. The manipulation of the argument pp leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.
Eine problematische Schwachstelle wurde in HDF5 bis 1.14.6 entdeckt. Betroffen davon ist die Funktion H5F_addr_encode_len der Datei src/H5Fint.c. Durch die Manipulation des Arguments pp mit unbekannten Daten kann eine heap-based buffer overflow-Schwachstelle ausgenutzt werden. Der Angriff muss lokal passieren. Der Exploit steht zur öffentlichen Verfügung.
| 2025-03-28: | Advisory disclosed |
| 2025-03-28: | VulDB entry created |
| 2025-03-28: | VulDB entry last update |
vuldb.com/?id.301898 (VDB-301898 | HDF5 H5Fint.c H5F_addr_encode_len heap-based overflow)
vuldb.com/?ctiid.301898 (VDB-301898 | CTI Indicators (IOB, IOC, IOA))
vuldb.com/?submit.521151 (Submit #521151 | https://github.com/HDFGroup/hdf5 HDF5 1.14.6 Heap-based Buffer Overflow)
github.com/HDFGroup/hdf5/issues/5381
Support options
