CVE-2025-2915

ADVISORY - nist

Summary

A vulnerability classified as problematic was found in HDF5 up to 1.14.6. This vulnerability affects the function H5F__accum_free of the file src/H5Faccum.c. The manipulation of the argument overlap_size leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

EPSS Score⁠: 0.00297 (0.207)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-119⁠

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-122⁠

Heap-based Buffer Overflow

CWE-787⁠

Out-of-bounds Write

ADVISORY - redhat

(CWE-119|CWE-122)⁠

Impacted images

Advisories

NIST

CREATED

2 years ago

UPDATED

4 months ago

ADVISORY IDCVE-2025-2915⁠

EXPLOITABILITY SCORE

1.8

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-119⁠CWE-122⁠CWE-787⁠

CVSS SCORE

1.9low

Alpine

CREATED

1 year ago

UPDATED

4 days ago

ADVISORY IDCVE-2025-2915⁠

EXPLOITABILITY SCORE

-

EXPLOITS FOUND

-

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Debian

CREATED

2 years ago

UPDATED

24 days ago

ADVISORY IDCVE-2025-2915⁠

EXPLOITABILITY SCORE

-

EXPLOITS FOUND

-

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow

Ubuntu

CREATED

2 years ago

UPDATED

8 months ago

ADVISORY IDCVE-2025-2915⁠

EXPLOITABILITY SCORE

1.8

EXPLOITS FOUND

-

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

5.5medium

Red Hat

CREATED

2 years ago

UPDATED

9 months ago

ADVISORY IDCVE-2025-2915⁠

EXPLOITABILITY SCORE

1.8

EXPLOITS FOUND

-

COMMON WEAKNESS ENUMERATION (CWE)

(CWE-119|CWE-122)⁠

CVSS SCORE

3.3low