PT-2025-13569 · Hdf5+1 · Hdf5+1

·

CVE-2025-2926

·

Published

2025-03-28

·

Updated

2026-08-25

CVSS v3.1

8.8

High

VectorAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions HDF5 versions up to 1.14.6
Description A problematic issue was found in HDF5, affecting the H5O cache chk serialize function in the file src/H5Ocache.c. This issue leads to a null pointer dereference. The attack must be approached locally.
Recommendations For HDF5 versions up to 1.14.6, consider updating to a version that contains a fix for this issue, as the current version is affected by a null pointer dereference in the H5O cache chk serialize function. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Resource Release

NULL Pointer Dereference

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

AZL-59347
AZL-59397
CVE-2025-2926
ECHO-60A4-0A7A-B682
OESA-2026-1131
OESA-2026-1132
OESA-2026-1133
OESA-2026-1134
OESA-2026-1135
OESA-2026-1136

Affected Products

Debian
Hdf5