Sign In

CVE-2025-7068

ADVISORY - nist

Summary

A vulnerability, which was classified as problematic, has been found in HDF5 1.14.6. This issue affects the function H5FL__malloc of the file src/H5FL.c. The manipulation leads to memory leak. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

EPSS Score⁠: 0.00242 (0.142)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-401⁠

Missing Release of Memory after Effective Lifetime

CWE-404⁠

Improper Resource Shutdown or Release

ADVISORY - redhat

(CWE-401|CWE-404)⁠

Impacted images

Advisories

NIST

CREATED

UPDATED

ADVISORY IDCVE-2025-7068⁠
EXPLOITABILITY SCORE

1.8

EXPLOITS FOUND
COMMON WEAKNESS ENUMERATION (CWE)
CWE-401⁠CWE-404⁠

CVSS SCORE

1.9low

Debian

CREATED

UPDATED

ADVISORY IDCVE-2025-7068⁠
EXPLOITABILITY SCORE

-

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow

Ubuntu

CREATED

UPDATED

ADVISORY IDCVE-2025-7068⁠
EXPLOITABILITY SCORE

1.8

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

5.5medium

Red Hat

CREATED

UPDATED

ADVISORY IDCVE-2025-7068⁠
EXPLOITABILITY SCORE

1.8

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)
(CWE-401|CWE-404)⁠

CVSS SCORE

3.3low