CVE-2025-2914: HDF5 H5FScache.c H5FS__sinfo_Srialize_Sct_cb heap-based overflow
A vulnerability classified as problematic has been found in HDF5 up to 1.14.6. This affects the function H5FSsinfoSrializeSctcb of the file src/H5FScache.c. The manipulation of the argument sect leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.
Other sources
HDF5 H5FScache.c H5FSsinfoSrializeSctcb heap-based overflow
— Microsoft
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-2914?
CVE-2025-2914 is classified as problematic due to the potential for a heap-based buffer overflow.
How does the buffer overflow in CVE-2025-2914 occur?
The buffer overflow in CVE-2025-2914 occurs due to manipulation of the argument sect within the function H5FS__sinfo_Srialize_Sct_cb.
What software versions are affected by CVE-2025-2914?
CVE-2025-2914 affects HDF5 versions up to and including 1.14.6.
Who is impacted by CVE-2025-2914?
Local users with access to the affected systems can exploit CVE-2025-2914.
How can I mitigate the risks associated with CVE-2025-2914?
To mitigate the risks of CVE-2025-2914, it is recommended to upgrade to a version of HDF5 that is higher than 1.14.6.