CVE-2025-2914

Name of the Vulnerable Software and Affected Versions HDF5 versions up to 1.14.6

Description A problematic vulnerability has been found in HDF5, affecting the function H5FS sinfo Srialize Sct cb of the file src/H5FScache.c. The manipulation of the argument sect leads to a heap-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.

Recommendations For HDF5 versions up to 1.14.6, as a temporary workaround, consider disabling the H5FS sinfo Srialize Sct cb function until a patch is available. Restrict access to the src/H5FScache.c file to minimize the risk of exploitation. Avoid using the argument sect in the affected function until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.