CVE-2025-2923
CVSS 3.1 Score 8.6 of 10 (high)
Attack Complexity low
Integrity high
Confidentiality low
Availability low
Scope unchanged
Privileges Required none
Details
Published Mar 28, 2025
Updated: Apr 1, 2025
CWE ID 77
Summary
CVE-2025-2923 is a recently disclosed vulnerability affecting HDF5 versions up to 1.14.6. The issue lies within the H5F_addr_encode_len function in the file src/H5Fint.c. An attacker can exploit this vulnerability by manipulating the argument pp, resulting in a heap-based buffer overflow. Since this vulnerability requires local access, it poses a threat primarily to users who run affected HDF5 installations on their systems. The exploit for this vulnerability has been made public, increasing the risk of potential attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- E5600
Affected Vendors
- Linksys