Sign In

CVE-2025-6856

ADVISORY - nist

Summary

A vulnerability, which was classified as problematic, was found in HDF5 1.14.6. Affected is the function H5FL__reg_gc_list of the file src/H5FL.c. The manipulation leads to use after free. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

EPSS Score⁠: 0.00248 (0.149)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-119⁠

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-416⁠

Use After Free

ADVISORY - redhat

(CWE-119|CWE-416)⁠

Impacted images

Advisories

NIST

CREATED

UPDATED

ADVISORY IDCVE-2025-6856⁠
EXPLOITABILITY SCORE

1.8

EXPLOITS FOUND
COMMON WEAKNESS ENUMERATION (CWE)
CWE-119⁠CWE-416⁠

CVSS SCORE

1.9low

Debian

CREATED

UPDATED

ADVISORY IDCVE-2025-6856⁠
EXPLOITABILITY SCORE

-

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow

Ubuntu

CREATED

UPDATED

ADVISORY IDCVE-2025-6856⁠
EXPLOITABILITY SCORE

1.8

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

7.8low

Red Hat

CREATED

UPDATED

ADVISORY IDCVE-2025-6856⁠
EXPLOITABILITY SCORE

1.8

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)
(CWE-119|CWE-416)⁠

CVSS SCORE

3.3low