CVE-2025-6750

Name of the Vulnerable Software and Affected Versions: HDF5 version 1.14.6

Description: A heap-based buffer overflow issue has been found in the function H5O mtime new encode of the file src/H5Omtime.c. The manipulation leads to this issue, and attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

Recommendations: For HDF5 version 1.14.6, consider disabling the H5O mtime new encode function as a temporary workaround until a patch is available. Restrict access to the src/H5Omtime.c file to minimize the risk of exploitation. Avoid using the H5O mtime new encode function in local attacks until the issue is resolved.