CVE-2025-2926
A vulnerability was found in HDF5 up to 1.14.6 and classified as problematic. This issue affects the function H5O__cache_chk_serialize of the file src/H5Ocache.c. The manipulation leads to null pointer dereference. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.
- Score
- CVSS 3.1 5.5 Medium
- Status
- Modified - cna@vuldb.com
- Published
- 2025-03-28
- Last modified
- 2025-07-24
- Weaknesses
- CWE-404, CWE-476
Affected products
References
- https://github.com/HDFGroup/hdf5/issues/5384
- https://vuldb.com/?ctiid.301901
- https://vuldb.com/?id.301901
- https://vuldb.com/?submit.521246
