CVE-2025-2925: HDF5 H5MM.c H5MM_realloc double free
Published Mar 28, 2025
·Updated
A vulnerability has been found in HDF5 up to 1.14.6 and classified as problematic. This vulnerability affects the function H5MMrealloc of the file src/H5MM.c. The manipulation of the argument mem leads to double free. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.
Affected Software
6 affected componentsFixes available
HDF Group HDF5<=1.14.6
HDFGroup hdf5<=1.14.6
Microsoft azl3 hdf5 1.14.4.3-1
Microsoft cbl2 hdf5 1.14.4-1
Microsoft cbl2 hdf5 1.14.4-1
Microsoft cbl2 hdf5 1.14.6-1
Event History
Mar 28, 2025
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Sep 3, 2025
Data Sourced
via Microsoft·09:20 PM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·09:20 PM
SeverityAffected Software
Updated
via Microsoft·09:20 PM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2025-2925?
CVE-2025-2925 is classified as a problematic vulnerability affecting HDF5 versions up to 1.14.6.
2
How do I fix CVE-2025-2925?
To fix CVE-2025-2925, upgrade HDF5 to a version later than 1.14.6.
3
What does the CVE-2025-2925 vulnerability affect?
CVE-2025-2925 affects the H5MM_realloc function in HDF5, leading to potential double free issues.
4
How does CVE-2025-2925 impact users?
CVE-2025-2925 can lead to memory corruption and potential local exploitation.
5
Is CVE-2025-2925 remotely exploitable?
CVE-2025-2925 requires local access for exploitation.