CVE-2025-7067: HDF5 H5FScache.c H5FS__sinfo_serialize_node_cb heap-based overflow
A vulnerability classified as problematic was found in HDF5 1.14.6. This vulnerability affects the function H5FSsinfoserializenodecb of the file src/H5FScache.c. The manipulation leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.
Other sources
HDF5 H5FScache.c H5FSsinfoserializenodecb heap-based overflow
— Microsoft
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7067?
CVE-2025-7067 is classified as a problematic vulnerability due to its potential to cause a heap-based buffer overflow.
How do I fix CVE-2025-7067?
To fix CVE-2025-7067, update HDF5 to the latest patched version provided by HDF Group.
What types of access are required to exploit CVE-2025-7067?
Local access is required to exploit CVE-2025-7067.
Which function is affected by the CVE-2025-7067 vulnerability?
The CVE-2025-7067 vulnerability affects the function H5FS__sinfo_serialize_node_cb in the HDF5 library.
What could be the consequences of exploiting CVE-2025-7067?
Exploiting CVE-2025-7067 could lead to a heap-based buffer overflow, potentially resulting in arbitrary code execution.