Low severity3.3NVD Advisory· Published Mar 28, 2025· Updated Apr 29, 2026

CVE-2025-2924

Description

A vulnerability, which was classified as problematic, was found in HDF5 up to 1.14.6. This affects the function H5HL__fl_deserialize of the file src/H5HLcache.c. The manipulation of the argument free_block leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Hdfgroup/Hdf52 versions
cpe:2.3:a:hdfgroup:hdf5:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:hdfgroup:hdf5:*:*:*:*:*:*:*:*range: <=1.14.6
- (no CPE)range: <=1.14.6

Patches

Vulnerability mechanics

References

github.com/HDFGroup/hdf5/issues/5382nvdExploitIssue TrackingThird Party Advisory
vuldb.comnvdThird Party AdvisoryVDB Entry
vuldb.comnvdThird Party AdvisoryVDB Entry
vuldb.comnvdPermissions RequiredVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.214
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000