CVE-2025-6858

Name of the Vulnerable Software and Affected Versions: HDF5 version 1.14.6

Description: A null pointer dereference issue was found in the function H5C flush single entry of the file src/H5Centry.c. The manipulation leads to this issue, and the attack needs to be approached locally.

Recommendations: For HDF5 version 1.14.6, consider restricting access to the H5C flush single entry function until a patch is available. As a temporary workaround, avoid using the affected function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.