CVE-2025-2925

LOW

HDF5 <1.14.6 - Use After Free

Title source: llm

Description

A vulnerability has been found in HDF5 up to 1.14.6 and classified as problematic. This vulnerability affects the function H5MM_realloc of the file src/H5MM.c. The manipulation of the argument mem leads to double free. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.

References (4)

[Exploit, Issue Tracking, Third Party Advisory] https://github.com/HDFGroup/hdf5/issues/5383

[Permissions Required, VDB Entry] https://vuldb.com/?ctiid.301900

[Third Party Advisory, VDB Entry] https://vuldb.com/?id.301900

[Third Party Advisory, VDB Entry] https://vuldb.com/?submit.521193

Scores

CVSS v3 3.3

EPSS 0.0009

EPSS Percentile 24.8%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Classification

CWE

CWE-119 CWE-415

Status published

Affected Products (1)

hdfgroup/hdf5 < 1.14.6

Timeline

Published Mar 28, 2025

Tracked Since Feb 18, 2026