PT-2025-27043 · Hdf5+1 · Hdf5+1

Jjleo · Published 2025-06-27 · Updated 2026-01-16 · CVE-2025-6750

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions: HDF5 version 1.14.6

Description: A heap-based buffer overflow issue has been found in the function H5O mtime new encode of the file src/H5Omtime.c. The manipulation leads to this issue, and attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

Recommendations: For HDF5 version 1.14.6, consider disabling the H5O mtime new encode function as a temporary workaround until a patch is available. Restrict access to the src/H5Omtime.c file to minimize the risk of exploitation. Avoid using the H5O mtime new encode function in local attacks until the issue is resolved.

Exploit

Fix

Buffer Overflow

Heap Based Buffer Overflow

Weakness Enumeration

CWE-119

CWE-122

Related Identifiers

AZL-64422

AZL-64440

CVE-2025-6750

ECHO-C376-97BB-2492

OESA-2026-1005

OESA-2026-1006

OESA-2026-1007

OESA-2026-1131

OESA-2026-1132

OESA-2026-1133

Affected Products

Debian

Hdf5

References · 51

• 🔥 https://github.com/HDFGroup/hdf5/issues/5549 · Exploit
• 🔥❌ https://github.com/user-attachments/files/20438441/hdf5_crash_1.txt · Exploit, Deleted
• https://osv.dev/vulnerability/AZL-64440 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-6816 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-6857 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-6269 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-2925 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-6750 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-6750 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-2310 · Security Note
• https://osv.dev/vulnerability/OESA-2026-1006 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-6750 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-6818 · Security Note
• https://osv.dev/vulnerability/OESA-2026-1005 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-7067 · Security Note