CVE-2025-7068: HDF5 H5FL.c H5FL__malloc memory leak
Published Jul 4, 2025
·Updated
A vulnerability, which was classified as problematic, has been found in HDF5 1.14.6. This issue affects the function H5FLmalloc of the file src/H5FL.c. The manipulation leads to memory leak. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.
Affected Software
7 affected componentsFixes available
HDF Group HDF5
HDFGroup hdf5=1.14.6
Microsoft azl3 hdf5 1.14.4.3-1
Microsoft cbl2 hdf5 1.14.4-1
Microsoft cbl2 hdf5 1.14.4-1
Microsoft cbl2 hdf5 1.14.6-1
Microsoft azl3 hdf5 1.14.6-1
Event History
Jul 4, 2025
CVE Published
via MITRE·08:32 PM
Data Sourced
via MITRE·08:32 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Sep 3, 2025
Data Sourced
via Microsoft·10:54 PM
DescriptionSeverityWeaknessAffected Software
Sep 4, 2025
Updated
via Microsoft·05:54 AM
DescriptionSeverity
Updated
via Microsoft·05:54 AM
SeverityAffected Software
Apr 29, 57559
Event
via FIRST·05:37 PM
Jun 13, 58473
Event
via NVD·08:16 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-7068?
CVE-2025-7068 is classified as a problematic vulnerability due to its potential to cause memory leaks.
2
How do I fix CVE-2025-7068?
To fix CVE-2025-7068, update HDF5 to the latest version provided by HDF Group that addresses the memory leak.
3
What components are affected by CVE-2025-7068?
CVE-2025-7068 affects the H5FL__malloc function within the HDF5 library.
4
Can CVE-2025-7068 be exploited remotely?
No, CVE-2025-7068 requires local access to exploit the memory leak.
5
When was CVE-2025-7068 publicly disclosed?
CVE-2025-7068 has been publicly disclosed, but the specific date of disclosure is not provided.