← Back to CVEs

CVE-2025-6269

MEDIUM

5.3

Description

A vulnerability classified as critical was found in HDF5 up to 1.14.6. Affected by this vulnerability is the function H5C__reconstruct_cache_entry of the file H5Cimage.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

CVE Details

CVSS v3.1 Score5.3

SeverityMEDIUM

CVSS VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Attack VectorLOCAL

ComplexityLOW

Privileges RequiredLOW

User InteractionNONE

Published6/19/2025

Last Modified4/29/2026

Sourcenvd

Honeypot Sightings0

Affected Products

hdfgroup:hdf5

Weaknesses (CWE)

CWE-119CWE-122

References

https://github.com/HDFGroup/hdf5/issues/5579(cna@vuldb.com)

https://github.com/user-attachments/files/20626503/reproduce.tar.gz(cna@vuldb.com)

https://vuldb.com/?ctiid.313273(cna@vuldb.com)

https://vuldb.com/?id.313273(cna@vuldb.com)

https://vuldb.com/?submit.592587(cna@vuldb.com)

https://github.com/HDFGroup/hdf5/issues/5579(134c704f-9b21-4f2e-91b3-4a467353bcc0)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.