Vulnerability-Lookup

CVE-2025-2915 (GCVE-0-2025-2915)

Vulnerability from cvelistv5 – Published: 2025-03-28 17:00 – Updated: 2025-07-24 09:43

Title

HDF5 H5Faccum.c H5F__accum_free heap-based overflow

Summary

A vulnerability classified as problematic was found in HDF5 up to 1.14.6. This vulnerability affects the function H5F__accum_free of the file src/H5Faccum.c. The manipulation of the argument overlap_size leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

Severity

4.8 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P

3.3 (Low)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R

3.3 (Low)


                        
                          CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-03-28 17:43 UTC

CWE

CWE-122 - Heap-based Buffer Overflow
CWE-119 - Memory Corruption

Assigner

VulDB mitre root

References

4 references

URL	Tags
https://vuldb.com/?id.301888	vdb-entrytechnical-description
https://vuldb.com/?ctiid.301888	signaturepermissions-required
https://vuldb.com/?submit.520899	third-party-advisory
https://github.com/HDFGroup/hdf5/issues/5380	exploitissue-tracking

Impacted products

1 product

Vendor	Product	Version	CPE status
n/a	HDF5	Affected: 1.14.0 Affected: 1.14.1 Affected: 1.14.2 Affected: 1.14.3 Affected: 1.14.4 Affected: 1.14.5 Affected: 1.14.6

Credits

Chen Lihai

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-2915",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-03-28T17:43:38.639720Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-28T17:43:49.940Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/HDFGroup/hdf5/issues/5380"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "HDF5",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "1.14.0"
            },
            {
              "status": "affected",
              "version": "1.14.1"
            },
            {
              "status": "affected",
              "version": "1.14.2"
            },
            {
              "status": "affected",
              "version": "1.14.3"
            },
            {
              "status": "affected",
              "version": "1.14.4"
            },
            {
              "status": "affected",
              "version": "1.14.5"
            },
            {
              "status": "affected",
              "version": "1.14.6"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Chen Lihai"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability classified as problematic was found in HDF5 up to 1.14.6. This vulnerability affects the function H5F__accum_free of the file src/H5Faccum.c. The manipulation of the argument overlap_size leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used."
        },
        {
          "lang": "de",
          "value": "In HDF5 bis 1.14.6 wurde eine Schwachstelle entdeckt. Sie wurde als problematisch eingestuft. Dabei geht es um die Funktion H5F__accum_free der Datei src/H5Faccum.c. Durch Manipulation des Arguments overlap_size mit unbekannten Daten kann eine heap-based buffer overflow-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs hat dabei lokal zu erfolgen. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 1.7,
            "vectorString": "AV:L/AC:L/Au:S/C:N/I:N/A:P/E:POC/RL:ND/RC:UR",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "Heap-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-119",
              "description": "Memory Corruption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-24T09:43:40.199Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-301888 | HDF5 H5Faccum.c H5F__accum_free heap-based overflow",
          "tags": [
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://vuldb.com/?id.301888"
        },
        {
          "name": "VDB-301888 | CTI Indicators (IOB, IOC, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/?ctiid.301888"
        },
        {
          "name": "Submit #520899 | https://github.com/HDFGroup/hdf5 HDF5 v1.14.6 Heap-based Buffer Overflow",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/?submit.520899"
        },
        {
          "tags": [
            "exploit",
            "issue-tracking"
          ],
          "url": "https://github.com/HDFGroup/hdf5/issues/5380"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2025-03-28T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2025-03-28T01:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2025-07-24T11:45:03.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "HDF5 H5Faccum.c H5F__accum_free heap-based overflow"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2025-2915",
    "datePublished": "2025-03-28T17:00:08.968Z",
    "dateReserved": "2025-03-28T11:01:40.970Z",
    "dateUpdated": "2025-07-24T09:43:40.199Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2025-2915",
      "date": "2026-09-20",
      "epss": "0.00297",
      "percentile": "0.22543"
    },
    "microsoft_vex": {
      "current_release_date": "2026-03-31T15:14:30.000Z",
      "cve": "CVE-2025-2915",
      "id": "msrc_CVE-2025-2915",
      "initial_release_date": "2025-03-02T00:00:00.000Z",
      "product_status:fixed": "4",
      "product_status:known_affected": "7",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "HDF5 H5Faccum.c H5F__accum_free heap-based overflow",
      "url": "https://msrc.microsoft.com/csaf/vex/2025/msrc_cve-2025-2915.json",
      "version": "5"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "product": "HDF5",
                "vendor": "n/a",
                "versions": [
                  {
                    "status": "affected",
                    "version": "1.14.0"
                  },
                  {
                    "status": "affected",
                    "version": "1.14.1"
                  },
                  {
                    "status": "affected",
                    "version": "1.14.2"
                  },
                  {
                    "status": "affected",
                    "version": "1.14.3"
                  },
                  {
                    "status": "affected",
                    "version": "1.14.4"
                  },
                  {
                    "status": "affected",
                    "version": "1.14.5"
                  },
                  {
                    "status": "affected",
                    "version": "1.14.6"
                  }
                ]
              }
            ],
            "source": "cna@vuldb.com"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:hdfgroup:hdf5:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F9158517-069A-4BE6-98F2-EBFDE3437236",
                    "versionEndIncluding": "1.14.6",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "A vulnerability classified as problematic was found in HDF5 up to 1.14.6. This vulnerability affects the function H5F__accum_free of the file src/H5Faccum.c. The manipulation of the argument overlap_size leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used."
          },
          {
            "lang": "es",
            "value": "Se detect\u00f3 una vulnerabilidad clasificada como problem\u00e1tica en HDF5 hasta la versi\u00f3n 1.14.6. Esta vulnerabilidad afecta a la funci\u00f3n H5F__accum_free del archivo src/H5Faccum.c. La manipulaci\u00f3n del argumento overlay_size provoca un desbordamiento del b\u00fafer en el mont\u00f3n. Es necesario realizar ataques locales. Se ha hecho p\u00fablico el exploit y puede que sea utilizado."
          }
        ],
        "id": "CVE-2025-2915",
        "lastModified": "2026-06-17T09:07:50.653",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "LOW",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "LOCAL",
                "authentication": "SINGLE",
                "availabilityImpact": "PARTIAL",
                "baseScore": 1.7,
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "vectorString": "AV:L/AC:L/Au:S/C:N/I:N/A:P",
                "version": "2.0"
              },
              "exploitabilityScore": 3.1,
              "impactScore": 2.9,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "cna@vuldb.com",
              "type": "Secondary",
              "userInteractionRequired": false
            }
          ],
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "LOW",
                "baseScore": 3.3,
                "baseSeverity": "LOW",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 1.4,
              "source": "cna@vuldb.com",
              "type": "Secondary"
            },
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 5.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 3.6,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ],
          "cvssMetricV40": [
            {
              "cvssData": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "NOT_DEFINED",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "LOCAL",
                "availabilityRequirement": "NOT_DEFINED",
                "baseScore": 1.9,
                "baseSeverity": "LOW",
                "confidentialityRequirement": "NOT_DEFINED",
                "exploitMaturity": "PROOF_OF_CONCEPT",
                "integrityRequirement": "NOT_DEFINED",
                "modifiedAttackComplexity": "NOT_DEFINED",
                "modifiedAttackRequirements": "NOT_DEFINED",
                "modifiedAttackVector": "NOT_DEFINED",
                "modifiedPrivilegesRequired": "NOT_DEFINED",
                "modifiedSubAvailabilityImpact": "NOT_DEFINED",
                "modifiedSubConfidentialityImpact": "NOT_DEFINED",
                "modifiedSubIntegrityImpact": "NOT_DEFINED",
                "modifiedUserInteraction": "NOT_DEFINED",
                "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
                "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
                "modifiedVulnIntegrityImpact": "NOT_DEFINED",
                "privilegesRequired": "LOW",
                "providerUrgency": "NOT_DEFINED",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "valueDensity": "NOT_DEFINED",
                "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
                "version": "4.0",
                "vulnAvailabilityImpact": "LOW",
                "vulnConfidentialityImpact": "NONE",
                "vulnIntegrityImpact": "NONE",
                "vulnerabilityResponseEffort": "NOT_DEFINED"
              },
              "source": "cna@vuldb.com",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2025-2915",
                "options": [
                  {
                    "exploitation": "poc"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-03-28T17:43:38.639720Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2025-03-28T17:15:30.750",
        "references": [
          {
            "source": "cna@vuldb.com",
            "tags": [
              "Exploit",
              "Issue Tracking",
              "Third Party Advisory"
            ],
            "url": "https://github.com/HDFGroup/hdf5/issues/5380"
          },
          {
            "source": "cna@vuldb.com",
            "tags": [
              "Permissions Required",
              "VDB Entry"
            ],
            "url": "https://vuldb.com/?ctiid.301888"
          },
          {
            "source": "cna@vuldb.com",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "https://vuldb.com/?id.301888"
          },
          {
            "source": "cna@vuldb.com",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "https://vuldb.com/?submit.520899"
          },
          {
            "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
            "tags": [
              "Exploit",
              "Issue Tracking",
              "Third Party Advisory"
            ],
            "url": "https://github.com/HDFGroup/hdf5/issues/5380"
          }
        ],
        "sourceIdentifier": "cna@vuldb.com",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-119"
              },
              {
                "lang": "en",
                "value": "CWE-122"
              }
            ],
            "source": "cna@vuldb.com",
            "type": "Secondary"
          },
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-787"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2026-06-28T06:48:12+00:00",
      "cve": "CVE-2025-2915",
      "id": "CVE-2025-2915",
      "initial_release_date": "2025-03-28T17:00:08.968000+00:00",
      "product_status:known_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "hdf5: HDF5 H5Faccum.c H5F__accum_free heap-based overflow",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-2915.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-01-15T00:55:08Z",
      "cve": "CVE-2025-2915",
      "id": "CVE-2025-2915",
      "initial_release_date": "2025-04-01T01:43:53Z",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2025-2915",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2025-2915.json",
      "version": "7"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2025-2915",
                    "options": [
                      {
                        "Exploitation": "poc"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2025-03-28T17:43:38.639720Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2025-03-28T17:43:46.620Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "references": [
              {
                "tags": [
                  "exploit"
                ],
                "url": "https://github.com/HDFGroup/hdf5/issues/5380"
              }
            ],
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "HDF5",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "1.14.0"
                },
                {
                  "status": "affected",
                  "version": "1.14.1"
                },
                {
                  "status": "affected",
                  "version": "1.14.2"
                },
                {
                  "status": "affected",
                  "version": "1.14.3"
                },
                {
                  "status": "affected",
                  "version": "1.14.4"
                },
                {
                  "status": "affected",
                  "version": "1.14.5"
                },
                {
                  "status": "affected",
                  "version": "1.14.6"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "A vulnerability classified as problematic was found in HDF5 up to 1.14.6. This vulnerability affects the function H5F__accum_free of the file src/H5Faccum.c. The manipulation of the argument overlap_size leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used."
            },
            {
              "lang": "de",
              "value": "In HDF5 bis 1.14.6 wurde eine Schwachstelle entdeckt. Sie wurde als problematisch eingestuft. Dabei geht es um die Funktion H5F__accum_free der Datei src/H5Faccum.c. Durch Manipulation des Arguments overlap_size mit unbekannten Daten kann eine heap-based buffer overflow-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs hat dabei lokal zu erfolgen. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "baseScore": 4.8,
                "baseSeverity": "MEDIUM",
                "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
                "version": "4.0"
              }
            },
            {
              "cvssV3_1": {
                "baseScore": 3.3,
                "baseSeverity": "LOW",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                "version": "3.1"
              }
            },
            {
              "cvssV3_0": {
                "baseScore": 3.3,
                "baseSeverity": "LOW",
                "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                "version": "3.0"
              }
            },
            {
              "cvssV2_0": {
                "baseScore": 1.7,
                "vectorString": "AV:L/AC:L/Au:S/C:N/I:N/A:P",
                "version": "2.0"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-122",
                  "description": "Heap-based Buffer Overflow",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            },
            {
              "descriptions": [
                {
                  "cweId": "CWE-119",
                  "description": "Memory Corruption",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2025-03-28T17:00:08.968Z",
            "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
            "shortName": "VulDB"
          },
          "references": [
            {
              "name": "VDB-301888 | HDF5 H5Faccum.c H5F__accum_free heap-based overflow",
              "tags": [
                "vdb-entry",
                "technical-description"
              ],
              "url": "https://vuldb.com/?id.301888"
            },
            {
              "name": "VDB-301888 | CTI Indicators (IOB, IOC, IOA)",
              "tags": [
                "signature",
                "permissions-required"
              ],
              "url": "https://vuldb.com/?ctiid.301888"
            },
            {
              "name": "Submit #520899 | https://github.com/HDFGroup/hdf5 HDF5 v1.14.6 Heap-based Buffer Overflow",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/?submit.520899"
            },
            {
              "tags": [
                "exploit",
                "issue-tracking"
              ],
              "url": "https://github.com/HDFGroup/hdf5/issues/5380"
            }
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2025-03-28T00:00:00.000Z",
              "value": "Advisory disclosed"
            },
            {
              "lang": "en",
              "time": "2025-03-28T01:00:00.000Z",
              "value": "VulDB entry created"
            },
            {
              "lang": "en",
              "time": "2025-03-28T12:06:51.000Z",
              "value": "VulDB entry last update"
            }
          ],
          "title": "HDF5 H5Faccum.c H5F__accum_free heap-based overflow"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "assignerShortName": "VulDB",
        "cveId": "CVE-2025-2915",
        "datePublished": "2025-03-28T17:00:08.968Z",
        "dateReserved": "2025-03-28T11:01:40.970Z",
        "dateUpdated": "2025-03-28T17:43:49.940Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

CNVD-2025-18647

Vulnerability from cnvd - Published: 2025-08-15

Title

HDF5 H5F__accum_free函数缓冲区溢出漏洞

Description

HDF5是HDF开源的一个库。 HDF5存在缓冲区溢出漏洞，该漏洞源于H5F__accum_free函数未能正确验证输入数据的长度大小，攻击者可利用该漏洞导致拒绝服务。

Severity

低

Patch Name

HDF5 H5F__accum_free函数缓冲区溢出漏洞的补丁

Patch Description

HDF5是HDF开源的一个库。 HDF5存在缓冲区溢出漏洞，该漏洞源于H5F__accum_free函数未能正确验证输入数据的长度大小，攻击者可利用该漏洞导致拒绝服务。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

目前厂商已发布升级程序修复该安全问题，详情见厂商官网： https://github.com/HDFGroup/hdf5/releases

Reference

https://github.com/HDFGroup/hdf5/issues/5380

Impacted products

Name
HDF5 HDF5 <=1.14.6

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2025-2915",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2025-2915"
    }
  },
  "description": "HDF5\u662fHDF\u5f00\u6e90\u7684\u4e00\u4e2a\u5e93\u3002\n\nHDF5\u5b58\u5728\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8eH5F__accum_free\u51fd\u6570\u672a\u80fd\u6b63\u786e\u9a8c\u8bc1\u8f93\u5165\u6570\u636e\u7684\u957f\u5ea6\u5927\u5c0f\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5bfc\u81f4\u62d2\u7edd\u670d\u52a1\u3002",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u7a0b\u5e8f\u4fee\u590d\u8be5\u5b89\u5168\u95ee\u9898\uff0c\u8be6\u60c5\u89c1\u5382\u5546\u5b98\u7f51\uff1a\r\nhttps://github.com/HDFGroup/hdf5/releases",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2025-18647",
  "openTime": "2025-08-15",
  "patchDescription": "HDF5\u662fHDF\u5f00\u6e90\u7684\u4e00\u4e2a\u5e93\u3002\r\n\r\nHDF5\u5b58\u5728\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8eH5F__accum_free\u51fd\u6570\u672a\u80fd\u6b63\u786e\u9a8c\u8bc1\u8f93\u5165\u6570\u636e\u7684\u957f\u5ea6\u5927\u5c0f\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5bfc\u81f4\u62d2\u7edd\u670d\u52a1\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "HDF5 H5F__accum_free\u51fd\u6570\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "HDF5 HDF5 \u003c=1.14.6"
  },
  "referenceLink": "https://github.com/HDFGroup/hdf5/issues/5380",
  "serverity": "\u4f4e",
  "submitTime": "2025-04-03",
  "title": "HDF5 H5F__accum_free\u51fd\u6570\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e"
}

FKIE_CVE-2025-2915

Vulnerability from fkie_nvd - Published: 2025-03-28 17:15 - Updated: 2026-06-17 09:07

Severity

3.3 (Low) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Summary

References

URL	Tags
cna@vuldb.com	https://github.com/HDFGroup/hdf5/issues/5380	Exploit, Issue Tracking, Third Party Advisory
cna@vuldb.com	https://vuldb.com/?ctiid.301888	Permissions Required, VDB Entry
cna@vuldb.com	https://vuldb.com/?id.301888	Third Party Advisory, VDB Entry
cna@vuldb.com	https://vuldb.com/?submit.520899	Third Party Advisory, VDB Entry
134c704f-9b21-4f2e-91b3-4a467353bcc0	https://github.com/HDFGroup/hdf5/issues/5380	Exploit, Issue Tracking, Third Party Advisory

Impacted products

	Vendor	Product	Version
	hdfgroup	hdf5	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "HDF5",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "1.14.0"
            },
            {
              "status": "affected",
              "version": "1.14.1"
            },
            {
              "status": "affected",
              "version": "1.14.2"
            },
            {
              "status": "affected",
              "version": "1.14.3"
            },
            {
              "status": "affected",
              "version": "1.14.4"
            },
            {
              "status": "affected",
              "version": "1.14.5"
            },
            {
              "status": "affected",
              "version": "1.14.6"
            }
          ]
        }
      ],
      "source": "cna@vuldb.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:hdfgroup:hdf5:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F9158517-069A-4BE6-98F2-EBFDE3437236",
              "versionEndIncluding": "1.14.6",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability classified as problematic was found in HDF5 up to 1.14.6. This vulnerability affects the function H5F__accum_free of the file src/H5Faccum.c. The manipulation of the argument overlap_size leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used."
    },
    {
      "lang": "es",
      "value": "Se detect\u00f3 una vulnerabilidad clasificada como problem\u00e1tica en HDF5 hasta la versi\u00f3n 1.14.6. Esta vulnerabilidad afecta a la funci\u00f3n H5F__accum_free del archivo src/H5Faccum.c. La manipulaci\u00f3n del argumento overlay_size provoca un desbordamiento del b\u00fafer en el mont\u00f3n. Es necesario realizar ataques locales. Se ha hecho p\u00fablico el exploit y puede que sea utilizado."
    }
  ],
  "id": "CVE-2025-2915",
  "lastModified": "2026-06-17T09:07:50.653",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "LOW",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "LOCAL",
          "authentication": "SINGLE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 1.7,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:L/AC:L/Au:S/C:N/I:N/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 3.1,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "cna@vuldb.com",
        "type": "Secondary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "LOW",
          "baseScore": 3.3,
          "baseSeverity": "LOW",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 1.4,
        "source": "cna@vuldb.com",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 5.5,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ],
    "cvssMetricV40": [
      {
        "cvssData": {
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "attackVector": "LOCAL",
          "availabilityRequirement": "NOT_DEFINED",
          "baseScore": 1.9,
          "baseSeverity": "LOW",
          "confidentialityRequirement": "NOT_DEFINED",
          "exploitMaturity": "PROOF_OF_CONCEPT",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "privilegesRequired": "LOW",
          "providerUrgency": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "userInteraction": "NONE",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "version": "4.0",
          "vulnAvailabilityImpact": "LOW",
          "vulnConfidentialityImpact": "NONE",
          "vulnIntegrityImpact": "NONE",
          "vulnerabilityResponseEffort": "NOT_DEFINED"
        },
        "source": "cna@vuldb.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-2915",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2025-03-28T17:43:38.639720Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2025-03-28T17:15:30.750",
  "references": [
    {
      "source": "cna@vuldb.com",
      "tags": [
        "Exploit",
        "Issue Tracking",
        "Third Party Advisory"
      ],
      "url": "https://github.com/HDFGroup/hdf5/issues/5380"
    },
    {
      "source": "cna@vuldb.com",
      "tags": [
        "Permissions Required",
        "VDB Entry"
      ],
      "url": "https://vuldb.com/?ctiid.301888"
    },
    {
      "source": "cna@vuldb.com",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://vuldb.com/?id.301888"
    },
    {
      "source": "cna@vuldb.com",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://vuldb.com/?submit.520899"
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "tags": [
        "Exploit",
        "Issue Tracking",
        "Third Party Advisory"
      ],
      "url": "https://github.com/HDFGroup/hdf5/issues/5380"
    }
  ],
  "sourceIdentifier": "cna@vuldb.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        },
        {
          "lang": "en",
          "value": "CWE-122"
        }
      ],
      "source": "cna@vuldb.com",
      "type": "Secondary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-GG43-XFQW-XWG6

Vulnerability from github – Published: 2025-03-28 18:33 – Updated: 2025-03-28 18:33

Details

Severity

3.3 (Low)


                  
                    CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

4.8 (Medium)


                  
                    CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2025-2915"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-119",
      "CWE-787"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-03-28T17:15:30Z",
    "severity": "MODERATE"
  },
  "details": "A vulnerability classified as problematic was found in HDF5 up to 1.14.6. This vulnerability affects the function H5F__accum_free of the file src/H5Faccum.c. The manipulation of the argument overlap_size leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.",
  "id": "GHSA-gg43-xfqw-xwg6",
  "modified": "2025-03-28T18:33:37Z",
  "published": "2025-03-28T18:33:36Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-2915"
    },
    {
      "type": "WEB",
      "url": "https://github.com/HDFGroup/hdf5/issues/5380"
    },
    {
      "type": "WEB",
      "url": "https://vuldb.com/?ctiid.301888"
    },
    {
      "type": "WEB",
      "url": "https://vuldb.com/?id.301888"
    },
    {
      "type": "WEB",
      "url": "https://vuldb.com/?submit.520899"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
      "type": "CVSS_V4"
    }
  ]
}

MSRC_CVE-2025-2915

Vulnerability from csaf_microsoft - Published: 2025-03-02 00:00 - Updated: 2026-03-31 15:14

Summary

HDF5 H5Faccum.c H5F__accum_free heap-based overflow

Scope

1 vulnerability in this advisory, including CVE-2025-2915.

CVE-2025-2915

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Fixed: 4 products Known affected: 7 products

https://learn.microsoft.com/en-us/azure/azure-linux/tutoria…

Open the full advisory

OESA-2026-3873 (CVE-2025-2915)

Vulnerability from osv_openeuler – Published: 2026-09-20 13:22 – Updated: 2026-09-20 13:22 – Source website

Summary

hdf5 security update

Details

HDF5 is a data model, library, and file format for storing and managing data. It supports an unlimited variety of datatypes, and is designed for flexible and efficient I/O and for high volume and complex data. HDF5 is portable and is extensible, allowing applications to evolve in their use of HDF5. The HDF5 Technology suite includes tools and applications for managing, manipulating, viewing, and analyzing data in the HDF5 format.

Security Fix(es):

A critical vulnerability has been identified in HDF5 up to version 1.14.6. The issue affects the H5FS__sect_find_node function in the H5FSsection.c file, leading to a heap-based buffer overflow. The attack can be launched on the local host. The exploit has been publicly disclosed and may be in use.(CVE-2025-6270)

A vulnerability, classified as problematic, has been identified in HDF5 1.14.6. This issue affects the H5C__load_entry function in the file /src/H5Centry.c, leading to resource consumption. The attack requires local access. The exploit has been publicly disclosed and may be used.(CVE-2025-6817)

A vulnerability classified as problematic was found in HDF5 1.14.6, affecting the H5FS__sect_link_size function in the file src/H5FSsection.c. The manipulation leads to a heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.(CVE-2025-7069)

H5O__layout_decode in H5Olayout.c in HDF5 through 2.3.0 does not validate that a chunked dataset's stored chunk-layout dimensionality matches its dataspace rank when an existing dataset is opened, whereas this check is performed only at dataset-creation time. This allows attackers to cause a denial of service (divide-by-zero and application crash in H5S__hyper_iter_get_seq_list in src/H5Shyper.c) via a crafted HDF5 file with mismatched chunk/dataspace ranks that is opened and read via H5Dopen2 and H5Dread, e.g. by the h5repack tool.(CVE-2026-19025)

Severity

6.8 (Medium)


                    
                      CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

References

URL

Type

	https://www.openeuler.org/zh/security/security-bu…	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2025-2915	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2025-6270	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2025-6817	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2025-7069	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2026-19025	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "aarch64": [
          "hdf5-1.14.5-7.oe2403sp1.aarch64.rpm",
          "hdf5-debuginfo-1.14.5-7.oe2403sp1.aarch64.rpm",
          "hdf5-debugsource-1.14.5-7.oe2403sp1.aarch64.rpm",
          "hdf5-devel-1.14.5-7.oe2403sp1.aarch64.rpm",
          "hdf5-mpich-1.14.5-7.oe2403sp1.aarch64.rpm",
          "hdf5-mpich-devel-1.14.5-7.oe2403sp1.aarch64.rpm",
          "hdf5-mpich-static-1.14.5-7.oe2403sp1.aarch64.rpm",
          "hdf5-openmpi-1.14.5-7.oe2403sp1.aarch64.rpm",
          "hdf5-openmpi-devel-1.14.5-7.oe2403sp1.aarch64.rpm",
          "hdf5-openmpi-static-1.14.5-7.oe2403sp1.aarch64.rpm"
        ],
        "src": [
          "hdf5-1.14.5-7.oe2403sp1.src.rpm"
        ],
        "x86_64": [
          "hdf5-1.14.5-7.oe2403sp1.x86_64.rpm",
          "hdf5-debuginfo-1.14.5-7.oe2403sp1.x86_64.rpm",
          "hdf5-debugsource-1.14.5-7.oe2403sp1.x86_64.rpm",
          "hdf5-devel-1.14.5-7.oe2403sp1.x86_64.rpm",
          "hdf5-mpich-1.14.5-7.oe2403sp1.x86_64.rpm",
          "hdf5-mpich-devel-1.14.5-7.oe2403sp1.x86_64.rpm",
          "hdf5-mpich-static-1.14.5-7.oe2403sp1.x86_64.rpm",
          "hdf5-openmpi-1.14.5-7.oe2403sp1.x86_64.rpm",
          "hdf5-openmpi-devel-1.14.5-7.oe2403sp1.x86_64.rpm",
          "hdf5-openmpi-static-1.14.5-7.oe2403sp1.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:24.03-LTS-SP1",
        "name": "hdf5",
        "purl": "pkg:rpm/openEuler/hdf5\u0026distro=openEuler-24.03-LTS-SP1"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.14.5-7.oe2403sp1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "severity": "Medium"
  },
  "details": "HDF5 is a data model, library, and file format for storing and managing data. It supports an unlimited variety of datatypes, and is designed for flexible and efficient I/O and for high volume and complex data. HDF5 is portable and is extensible, allowing applications to evolve in their use of HDF5. The HDF5 Technology suite includes tools and applications for managing, manipulating, viewing, and analyzing data in the HDF5 format.\r\n\r\nSecurity Fix(es):\n\nA vulnerability classified as problematic was found in HDF5 up to 1.14.6. This vulnerability affects the function H5F__accum_free of the file src/H5Faccum.c. The manipulation of the argument overlap_size leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.(CVE-2025-2915)\n\nA critical vulnerability has been identified in HDF5 up to version 1.14.6. The issue affects the H5FS__sect_find_node function in the H5FSsection.c file, leading to a heap-based buffer overflow. The attack can be launched on the local host. The exploit has been publicly disclosed and may be in use.(CVE-2025-6270)\n\nA vulnerability, classified as problematic, has been identified in HDF5 1.14.6. This issue affects the H5C__load_entry function in the file /src/H5Centry.c, leading to resource consumption. The attack requires local access. The exploit has been publicly disclosed and may be used.(CVE-2025-6817)\n\nA vulnerability classified as problematic was found in HDF5 1.14.6, affecting the H5FS__sect_link_size function in the file src/H5FSsection.c. The manipulation leads to a heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.(CVE-2025-7069)\n\nH5O__layout_decode in H5Olayout.c in HDF5 through 2.3.0 does not validate that a chunked dataset\u0026apos;s stored chunk-layout dimensionality matches its dataspace rank when an existing dataset is opened, whereas this check is performed only at dataset-creation time. This allows attackers to cause a denial of service (divide-by-zero and application crash in H5S__hyper_iter_get_seq_list in src/H5Shyper.c) via a crafted HDF5 file with mismatched chunk/dataspace ranks that is opened and read via H5Dopen2 and H5Dread, e.g. by the h5repack tool.(CVE-2026-19025)",
  "id": "OESA-2026-3873",
  "modified": "2026-09-20T13:22:47Z",
  "published": "2026-09-20T13:22:47Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3873"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-2915"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-6270"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-6817"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-7069"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19025"
    }
  ],
  "schema_version": "1.7.2",
  "severity": [
    {
      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
      "type": "CVSS_V4"
    }
  ],
  "summary": "hdf5 security update",
  "upstream": [
    "CVE-2025-2915",
    "CVE-2025-6270",
    "CVE-2025-6817",
    "CVE-2025-7069",
    "CVE-2026-19025"
  ]
}

OESA-2026-3874 (CVE-2025-2915)

Vulnerability from osv_openeuler – Published: 2026-09-20 13:22 – Updated: 2026-09-20 13:22 – Source website

Summary

hdf5 security update

Details

Security Fix(es):

Severity

6.8 (Medium)


                    
                      CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

References

URL

Type

	https://www.openeuler.org/zh/security/security-bu…	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2025-2915	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2025-6270	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2025-6817	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2025-7069	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2026-19025	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "aarch64": [
          "hdf5-1.14.5-7.oe2403sp3.aarch64.rpm",
          "hdf5-debuginfo-1.14.5-7.oe2403sp3.aarch64.rpm",
          "hdf5-debugsource-1.14.5-7.oe2403sp3.aarch64.rpm",
          "hdf5-devel-1.14.5-7.oe2403sp3.aarch64.rpm",
          "hdf5-mpich-1.14.5-7.oe2403sp3.aarch64.rpm",
          "hdf5-mpich-devel-1.14.5-7.oe2403sp3.aarch64.rpm",
          "hdf5-mpich-static-1.14.5-7.oe2403sp3.aarch64.rpm",
          "hdf5-openmpi-1.14.5-7.oe2403sp3.aarch64.rpm",
          "hdf5-openmpi-devel-1.14.5-7.oe2403sp3.aarch64.rpm",
          "hdf5-openmpi-static-1.14.5-7.oe2403sp3.aarch64.rpm"
        ],
        "src": [
          "hdf5-1.14.5-7.oe2403sp3.src.rpm"
        ],
        "x86_64": [
          "hdf5-1.14.5-7.oe2403sp3.x86_64.rpm",
          "hdf5-debuginfo-1.14.5-7.oe2403sp3.x86_64.rpm",
          "hdf5-debugsource-1.14.5-7.oe2403sp3.x86_64.rpm",
          "hdf5-devel-1.14.5-7.oe2403sp3.x86_64.rpm",
          "hdf5-mpich-1.14.5-7.oe2403sp3.x86_64.rpm",
          "hdf5-mpich-devel-1.14.5-7.oe2403sp3.x86_64.rpm",
          "hdf5-mpich-static-1.14.5-7.oe2403sp3.x86_64.rpm",
          "hdf5-openmpi-1.14.5-7.oe2403sp3.x86_64.rpm",
          "hdf5-openmpi-devel-1.14.5-7.oe2403sp3.x86_64.rpm",
          "hdf5-openmpi-static-1.14.5-7.oe2403sp3.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:24.03-LTS-SP3",
        "name": "hdf5",
        "purl": "pkg:rpm/openEuler/hdf5\u0026distro=openEuler-24.03-LTS-SP3"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.14.5-7.oe2403sp3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "severity": "Medium"
  },
  "details": "HDF5 is a data model, library, and file format for storing and managing data. It supports an unlimited variety of datatypes, and is designed for flexible and efficient I/O and for high volume and complex data. HDF5 is portable and is extensible, allowing applications to evolve in their use of HDF5. The HDF5 Technology suite includes tools and applications for managing, manipulating, viewing, and analyzing data in the HDF5 format.\r\n\r\nSecurity Fix(es):\n\nA vulnerability classified as problematic was found in HDF5 up to 1.14.6. This vulnerability affects the function H5F__accum_free of the file src/H5Faccum.c. The manipulation of the argument overlap_size leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.(CVE-2025-2915)\n\nA critical vulnerability has been identified in HDF5 up to version 1.14.6. The issue affects the H5FS__sect_find_node function in the H5FSsection.c file, leading to a heap-based buffer overflow. The attack can be launched on the local host. The exploit has been publicly disclosed and may be in use.(CVE-2025-6270)\n\nA vulnerability, classified as problematic, has been identified in HDF5 1.14.6. This issue affects the H5C__load_entry function in the file /src/H5Centry.c, leading to resource consumption. The attack requires local access. The exploit has been publicly disclosed and may be used.(CVE-2025-6817)\n\nA vulnerability classified as problematic was found in HDF5 1.14.6, affecting the H5FS__sect_link_size function in the file src/H5FSsection.c. The manipulation leads to a heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.(CVE-2025-7069)\n\nH5O__layout_decode in H5Olayout.c in HDF5 through 2.3.0 does not validate that a chunked dataset\u0026apos;s stored chunk-layout dimensionality matches its dataspace rank when an existing dataset is opened, whereas this check is performed only at dataset-creation time. This allows attackers to cause a denial of service (divide-by-zero and application crash in H5S__hyper_iter_get_seq_list in src/H5Shyper.c) via a crafted HDF5 file with mismatched chunk/dataspace ranks that is opened and read via H5Dopen2 and H5Dread, e.g. by the h5repack tool.(CVE-2026-19025)",
  "id": "OESA-2026-3874",
  "modified": "2026-09-20T13:22:48Z",
  "published": "2026-09-20T13:22:48Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3874"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-2915"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-6270"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-6817"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-7069"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19025"
    }
  ],
  "schema_version": "1.7.2",
  "severity": [
    {
      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
      "type": "CVSS_V4"
    }
  ],
  "summary": "hdf5 security update",
  "upstream": [
    "CVE-2025-2915",
    "CVE-2025-6270",
    "CVE-2025-6817",
    "CVE-2025-7069",
    "CVE-2026-19025"
  ]
}

UBUNTU-CVE-2025-2915 (CVE-2025-2915)

Vulnerability from osv_ubuntu – Published: 2025-03-28 17:15 – Updated: 2026-05-20 15:15 – Source website

Details

Severity

3.3 (Low)


                    
                      CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

5.5 (Medium)


                    
                      CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

1.9 (Low)


                    
                      CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2025-2915	REPORT
	https://www.cve.org/CVERecord?id=CVE-2025-2915	REPORT
	https://github.com/HDFGroup/hdf5/issues/5380	REPORT
	https://vuldb.com/?ctiid.301888	REPORT
	https://vuldb.com/?id.301888	REPORT
	https://vuldb.com/?submit.520899	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "hdf5-helpers",
            "binary_version": "1.10.4+repack-11ubuntu1+esm1"
          },
          {
            "binary_name": "hdf5-tools",
            "binary_version": "1.10.4+repack-11ubuntu1+esm1"
          },
          {
            "binary_name": "libhdf5-103",
            "binary_version": "1.10.4+repack-11ubuntu1+esm1"
          },
          {
            "binary_name": "libhdf5-cpp-103",
            "binary_version": "1.10.4+repack-11ubuntu1+esm1"
          },
          {
            "binary_name": "libhdf5-java",
            "binary_version": "1.10.4+repack-11ubuntu1+esm1"
          },
          {
            "binary_name": "libhdf5-jni",
            "binary_version": "1.10.4+repack-11ubuntu1+esm1"
          },
          {
            "binary_name": "libhdf5-mpich-103",
            "binary_version": "1.10.4+repack-11ubuntu1+esm1"
          },
          {
            "binary_name": "libhdf5-openmpi-103",
            "binary_version": "1.10.4+repack-11ubuntu1+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:20.04:LTS",
        "name": "hdf5",
        "purl": "pkg:deb/ubuntu/hdf5@1.10.4+repack-11ubuntu1+esm1?arch=source\u0026distro=esm-apps/focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.10.4+repack-10",
        "1.10.4+repack-11",
        "1.10.4+repack-11ubuntu1",
        "1.10.4+repack-11ubuntu1+esm1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "hdf5-helpers",
            "binary_version": "1.10.7+repack-4ubuntu2"
          },
          {
            "binary_name": "hdf5-tools",
            "binary_version": "1.10.7+repack-4ubuntu2"
          },
          {
            "binary_name": "libhdf5-103",
            "binary_version": "1.10.7+repack-4ubuntu2"
          },
          {
            "binary_name": "libhdf5-103-1",
            "binary_version": "1.10.7+repack-4ubuntu2"
          },
          {
            "binary_name": "libhdf5-cpp-103",
            "binary_version": "1.10.7+repack-4ubuntu2"
          },
          {
            "binary_name": "libhdf5-cpp-103-1",
            "binary_version": "1.10.7+repack-4ubuntu2"
          },
          {
            "binary_name": "libhdf5-fortran-102",
            "binary_version": "1.10.7+repack-4ubuntu2"
          },
          {
            "binary_name": "libhdf5-hl-100",
            "binary_version": "1.10.7+repack-4ubuntu2"
          },
          {
            "binary_name": "libhdf5-hl-cpp-100",
            "binary_version": "1.10.7+repack-4ubuntu2"
          },
          {
            "binary_name": "libhdf5-hl-fortran-100",
            "binary_version": "1.10.7+repack-4ubuntu2"
          },
          {
            "binary_name": "libhdf5-java",
            "binary_version": "1.10.7+repack-4ubuntu2"
          },
          {
            "binary_name": "libhdf5-jni",
            "binary_version": "1.10.7+repack-4ubuntu2"
          },
          {
            "binary_name": "libhdf5-mpich-103",
            "binary_version": "1.10.7+repack-4ubuntu2"
          },
          {
            "binary_name": "libhdf5-mpich-103-1",
            "binary_version": "1.10.7+repack-4ubuntu2"
          },
          {
            "binary_name": "libhdf5-mpich-cpp-103-1",
            "binary_version": "1.10.7+repack-4ubuntu2"
          },
          {
            "binary_name": "libhdf5-mpich-fortran-102",
            "binary_version": "1.10.7+repack-4ubuntu2"
          },
          {
            "binary_name": "libhdf5-mpich-hl-100",
            "binary_version": "1.10.7+repack-4ubuntu2"
          },
          {
            "binary_name": "libhdf5-mpich-hl-cpp-100",
            "binary_version": "1.10.7+repack-4ubuntu2"
          },
          {
            "binary_name": "libhdf5-mpich-hl-fortran-100",
            "binary_version": "1.10.7+repack-4ubuntu2"
          },
          {
            "binary_name": "libhdf5-openmpi-103",
            "binary_version": "1.10.7+repack-4ubuntu2"
          },
          {
            "binary_name": "libhdf5-openmpi-103-1",
            "binary_version": "1.10.7+repack-4ubuntu2"
          },
          {
            "binary_name": "libhdf5-openmpi-cpp-103-1",
            "binary_version": "1.10.7+repack-4ubuntu2"
          },
          {
            "binary_name": "libhdf5-openmpi-fortran-102",
            "binary_version": "1.10.7+repack-4ubuntu2"
          },
          {
            "binary_name": "libhdf5-openmpi-hl-100",
            "binary_version": "1.10.7+repack-4ubuntu2"
          },
          {
            "binary_name": "libhdf5-openmpi-hl-cpp-100",
            "binary_version": "1.10.7+repack-4ubuntu2"
          },
          {
            "binary_name": "libhdf5-openmpi-hl-fortran-100",
            "binary_version": "1.10.7+repack-4ubuntu2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "hdf5",
        "purl": "pkg:deb/ubuntu/hdf5@1.10.7+repack-4ubuntu2?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.10.6+repack-5",
        "1.10.7+repack-4ubuntu1",
        "1.10.7+repack-4ubuntu2"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "hdf5-helpers",
            "binary_version": "1.10.10+repack-3.1ubuntu4"
          },
          {
            "binary_name": "hdf5-tools",
            "binary_version": "1.10.10+repack-3.1ubuntu4"
          },
          {
            "binary_name": "libhdf5-103-1t64",
            "binary_version": "1.10.10+repack-3.1ubuntu4"
          },
          {
            "binary_name": "libhdf5-cpp-103-1t64",
            "binary_version": "1.10.10+repack-3.1ubuntu4"
          },
          {
            "binary_name": "libhdf5-fortran-102t64",
            "binary_version": "1.10.10+repack-3.1ubuntu4"
          },
          {
            "binary_name": "libhdf5-hl-100t64",
            "binary_version": "1.10.10+repack-3.1ubuntu4"
          },
          {
            "binary_name": "libhdf5-hl-cpp-100t64",
            "binary_version": "1.10.10+repack-3.1ubuntu4"
          },
          {
            "binary_name": "libhdf5-hl-fortran-100t64",
            "binary_version": "1.10.10+repack-3.1ubuntu4"
          },
          {
            "binary_name": "libhdf5-java",
            "binary_version": "1.10.10+repack-3.1ubuntu4"
          },
          {
            "binary_name": "libhdf5-jni",
            "binary_version": "1.10.10+repack-3.1ubuntu4"
          },
          {
            "binary_name": "libhdf5-mpich-103-1t64",
            "binary_version": "1.10.10+repack-3.1ubuntu4"
          },
          {
            "binary_name": "libhdf5-mpich-cpp-103-1t64",
            "binary_version": "1.10.10+repack-3.1ubuntu4"
          },
          {
            "binary_name": "libhdf5-mpich-fortran-102t64",
            "binary_version": "1.10.10+repack-3.1ubuntu4"
          },
          {
            "binary_name": "libhdf5-mpich-hl-100t64",
            "binary_version": "1.10.10+repack-3.1ubuntu4"
          },
          {
            "binary_name": "libhdf5-mpich-hl-cpp-100t64",
            "binary_version": "1.10.10+repack-3.1ubuntu4"
          },
          {
            "binary_name": "libhdf5-mpich-hl-fortran-100t64",
            "binary_version": "1.10.10+repack-3.1ubuntu4"
          },
          {
            "binary_name": "libhdf5-openmpi-103-1t64",
            "binary_version": "1.10.10+repack-3.1ubuntu4"
          },
          {
            "binary_name": "libhdf5-openmpi-cpp-103-1t64",
            "binary_version": "1.10.10+repack-3.1ubuntu4"
          },
          {
            "binary_name": "libhdf5-openmpi-fortran-102t64",
            "binary_version": "1.10.10+repack-3.1ubuntu4"
          },
          {
            "binary_name": "libhdf5-openmpi-hl-100t64",
            "binary_version": "1.10.10+repack-3.1ubuntu4"
          },
          {
            "binary_name": "libhdf5-openmpi-hl-cpp-100t64",
            "binary_version": "1.10.10+repack-3.1ubuntu4"
          },
          {
            "binary_name": "libhdf5-openmpi-hl-fortran-100t64",
            "binary_version": "1.10.10+repack-3.1ubuntu4"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "hdf5",
        "purl": "pkg:deb/ubuntu/hdf5@1.10.10+repack-3.1ubuntu4?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.10.8+repack1-1ubuntu1",
        "1.10.10+repack-3ubuntu1",
        "1.10.10+repack-3.1ubuntu3",
        "1.10.10+repack-3.1ubuntu4"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "hdf5-helpers",
            "binary_version": "1.14.5+repack-3build1"
          },
          {
            "binary_name": "hdf5-tools",
            "binary_version": "1.14.5+repack-3build1"
          },
          {
            "binary_name": "libhdf5-310",
            "binary_version": "1.14.5+repack-3build1"
          },
          {
            "binary_name": "libhdf5-cpp-310",
            "binary_version": "1.14.5+repack-3build1"
          },
          {
            "binary_name": "libhdf5-fortran-310",
            "binary_version": "1.14.5+repack-3build1"
          },
          {
            "binary_name": "libhdf5-hl-310",
            "binary_version": "1.14.5+repack-3build1"
          },
          {
            "binary_name": "libhdf5-hl-cpp-310",
            "binary_version": "1.14.5+repack-3build1"
          },
          {
            "binary_name": "libhdf5-hl-fortran-310",
            "binary_version": "1.14.5+repack-3build1"
          },
          {
            "binary_name": "libhdf5-java",
            "binary_version": "1.14.5+repack-3build1"
          },
          {
            "binary_name": "libhdf5-jni",
            "binary_version": "1.14.5+repack-3build1"
          },
          {
            "binary_name": "libhdf5-mpich-310",
            "binary_version": "1.14.5+repack-3build1"
          },
          {
            "binary_name": "libhdf5-mpich-cpp-310",
            "binary_version": "1.14.5+repack-3build1"
          },
          {
            "binary_name": "libhdf5-mpich-fortran-310",
            "binary_version": "1.14.5+repack-3build1"
          },
          {
            "binary_name": "libhdf5-mpich-hl-310",
            "binary_version": "1.14.5+repack-3build1"
          },
          {
            "binary_name": "libhdf5-mpich-hl-cpp-310",
            "binary_version": "1.14.5+repack-3build1"
          },
          {
            "binary_name": "libhdf5-mpich-hl-fortran-310",
            "binary_version": "1.14.5+repack-3build1"
          },
          {
            "binary_name": "libhdf5-openmpi-310",
            "binary_version": "1.14.5+repack-3build1"
          },
          {
            "binary_name": "libhdf5-openmpi-cpp-310",
            "binary_version": "1.14.5+repack-3build1"
          },
          {
            "binary_name": "libhdf5-openmpi-fortran-310",
            "binary_version": "1.14.5+repack-3build1"
          },
          {
            "binary_name": "libhdf5-openmpi-hl-310",
            "binary_version": "1.14.5+repack-3build1"
          },
          {
            "binary_name": "libhdf5-openmpi-hl-cpp-310",
            "binary_version": "1.14.5+repack-3build1"
          },
          {
            "binary_name": "libhdf5-openmpi-hl-fortran-310",
            "binary_version": "1.14.5+repack-3build1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:25.10",
        "name": "hdf5",
        "purl": "pkg:deb/ubuntu/hdf5@1.14.5+repack-3build1?arch=source\u0026distro=questing"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.14.5+repack-3",
        "1.14.5+repack-3build1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "hdf5-helpers",
            "binary_version": "1.14.6+repack-2"
          },
          {
            "binary_name": "hdf5-tools",
            "binary_version": "1.14.6+repack-2"
          },
          {
            "binary_name": "libhdf5-310",
            "binary_version": "1.14.6+repack-2"
          },
          {
            "binary_name": "libhdf5-cpp-310",
            "binary_version": "1.14.6+repack-2"
          },
          {
            "binary_name": "libhdf5-fortran-310",
            "binary_version": "1.14.6+repack-2"
          },
          {
            "binary_name": "libhdf5-hl-310",
            "binary_version": "1.14.6+repack-2"
          },
          {
            "binary_name": "libhdf5-hl-cpp-310",
            "binary_version": "1.14.6+repack-2"
          },
          {
            "binary_name": "libhdf5-hl-fortran-310",
            "binary_version": "1.14.6+repack-2"
          },
          {
            "binary_name": "libhdf5-java",
            "binary_version": "1.14.6+repack-2"
          },
          {
            "binary_name": "libhdf5-jni",
            "binary_version": "1.14.6+repack-2"
          },
          {
            "binary_name": "libhdf5-mpich-310",
            "binary_version": "1.14.6+repack-2"
          },
          {
            "binary_name": "libhdf5-mpich-cpp-310",
            "binary_version": "1.14.6+repack-2"
          },
          {
            "binary_name": "libhdf5-mpich-fortran-310",
            "binary_version": "1.14.6+repack-2"
          },
          {
            "binary_name": "libhdf5-mpich-hl-310",
            "binary_version": "1.14.6+repack-2"
          },
          {
            "binary_name": "libhdf5-mpich-hl-cpp-310",
            "binary_version": "1.14.6+repack-2"
          },
          {
            "binary_name": "libhdf5-mpich-hl-fortran-310",
            "binary_version": "1.14.6+repack-2"
          },
          {
            "binary_name": "libhdf5-openmpi-310",
            "binary_version": "1.14.6+repack-2"
          },
          {
            "binary_name": "libhdf5-openmpi-cpp-310",
            "binary_version": "1.14.6+repack-2"
          },
          {
            "binary_name": "libhdf5-openmpi-fortran-310",
            "binary_version": "1.14.6+repack-2"
          },
          {
            "binary_name": "libhdf5-openmpi-hl-310",
            "binary_version": "1.14.6+repack-2"
          },
          {
            "binary_name": "libhdf5-openmpi-hl-cpp-310",
            "binary_version": "1.14.6+repack-2"
          },
          {
            "binary_name": "libhdf5-openmpi-hl-fortran-310",
            "binary_version": "1.14.6+repack-2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:26.04:LTS",
        "name": "hdf5",
        "purl": "pkg:deb/ubuntu/hdf5@1.14.6+repack-2?arch=source\u0026distro=resolute"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.14.5+repack-3build1",
        "1.14.5+repack-4",
        "1.14.6+repack-2"
      ]
    }
  ],
  "aliases": [],
  "details": "A vulnerability classified as problematic was found in HDF5 up to 1.14.6. This vulnerability affects the function H5F__accum_free of the file src/H5Faccum.c. The manipulation of the argument overlap_size leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.",
  "id": "UBUNTU-CVE-2025-2915",
  "modified": "2026-05-20T15:15:56Z",
  "published": "2025-03-28T17:15:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2025-2915"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-2915"
    },
    {
      "type": "REPORT",
      "url": "https://github.com/HDFGroup/hdf5/issues/5380"
    },
    {
      "type": "REPORT",
      "url": "https://vuldb.com/?ctiid.301888"
    },
    {
      "type": "REPORT",
      "url": "https://vuldb.com/?id.301888"
    },
    {
      "type": "REPORT",
      "url": "https://vuldb.com/?submit.520899"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
      "type": "CVSS_V4"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2025-2915"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2025-2915 (GCVE-0-2025-2915)

CNVD-2025-18647

FKIE_CVE-2025-2915

GHSA-GG43-XFQW-XWG6

MSRC_CVE-2025-2915

OESA-2026-3873 (CVE-2025-2915)

OESA-2026-3874 (CVE-2025-2915)

UBUNTU-CVE-2025-2915 (CVE-2025-2915)

Tags

Sightings

Nomenclature

Related by attack behaviour