PT-2025-28021

CVE-2025-7068

Published

2025-06-23

Updated

2026-01-16

Description by

CVSS 3.1

8.8

High

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: HDF5 version 1.14.6

Description: A problematic issue has been found in HDF5, affecting the function H5FL malloc of the file src/H5FL.c. This issue leads to a memory leak and requires local attacking to exploit. The exploit has been disclosed to the public and may be used.

Recommendations: For HDF5 version 1.14.6, consider disabling the H5FL malloc function as a temporary workaround until a patch is available.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-404: Improper Resource Shutdown or Release

CWE-401: Missing Release of Memory after Effective Lifetime

Related identifiers