Bug 2373903 (CVE-2025-6269) - CVE-2025-6269 hdf5: HDF5 heap-based overflow
Summary: CVE-2025-6269 hdf5: HDF5 heap-based overflow
Keywords:
Status: NEW
Alias: CVE-2025-6269
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On: 2374076 2374078 2374080 2374082 2374084 2374086
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-06-19 17:01 UTC by OSIDB Bzimport
Modified: 2025-06-20 18:20 UTC (History)
1 user (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2025-06-19 17:01:16 UTC 
A vulnerability classified as critical was found in HDF5 up to 1.14.6. Affected by this vulnerability is the function H5C__reconstruct_cache_entry of the file H5Cimage.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.
Note You need to log in before you can comment on or make changes to this bug.