Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2025-7069

Date: July 4, 2025

A vulnerability, which was classified as problematic, was found in HDF5 1.14.6. Affected is the function H5FS__sect_link_size of the file src/H5FSsection.c. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.

Severity Score

Related Resources (8)

https://security-tracker.debian.org/tracker/CVE-2025-7069
https://vuldb.com/?submit.602538
https://github.com/user-attachments/files/20438481/hdf5_crash_2.txt
https://nvd.nist.gov/vuln/detail/CVE-2025-7069
https://vuldb.com/?ctiid.314904
https://github.com/HDFGroup/hdf5/issues/5550
https://vuldb.com/?id.314904
https://www.mend.io/vulnerability-database/CVE-2025-7069

Severity Score

Weakness Type (CWE)

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-119

Heap-based Buffer Overflow

CWE-122

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): HIGH

Do you need more information?

Contact Us