CVE-2025-2926

ADVISORY - nist

Summary

A vulnerability was found in HDF5 up to 1.14.6 and classified as problematic. This issue affects the function H5O__cache_chk_serialize of the file src/H5Ocache.c. The manipulation leads to null pointer dereference. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.

EPSS Score⁠: 0.0025 (0.151)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-404⁠

Improper Resource Shutdown or Release

CWE-476⁠

NULL Pointer Dereference

ADVISORY - redhat

(CWE-404|CWE-476)⁠

Impacted images

Advisories

NIST

CREATED

2 years ago

UPDATED

4 months ago

ADVISORY IDCVE-2025-2926⁠

EXPLOITABILITY SCORE

1.8

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-404⁠CWE-476⁠

CVSS SCORE

1.9low

Alpine

CREATED

1 year ago

UPDATED

4 days ago

ADVISORY IDCVE-2025-2926⁠

EXPLOITABILITY SCORE

-

EXPLOITS FOUND

-

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Debian

CREATED

2 years ago

UPDATED

24 days ago

ADVISORY IDCVE-2025-2926⁠

EXPLOITABILITY SCORE

-

EXPLOITS FOUND

-

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow

Ubuntu

CREATED

2 years ago

UPDATED

8 months ago

ADVISORY IDCVE-2025-2926⁠

EXPLOITABILITY SCORE

1.8

EXPLOITS FOUND

-

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

5.5medium

Red Hat

CREATED

2 years ago

UPDATED

9 months ago

ADVISORY IDCVE-2025-2926⁠

EXPLOITABILITY SCORE

1.8

EXPLOITS FOUND

-

COMMON WEAKNESS ENUMERATION (CWE)

(CWE-404|CWE-476)⁠

CVSS SCORE

3.3low