Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2025-7068

Опубликовано: 04 июл. 2025
Источник: debian
EPSS Низкий

Описание

A vulnerability, which was classified as problematic, has been found in HDF5 1.14.6. This issue affects the function H5FL__malloc of the file src/H5FL.c. The manipulation leads to memory leak. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
hdf5unfixedpackage

Примечания

  • https://github.com/HDFGroup/hdf5/issues/5578

  • https://github.com/HDFGroup/hdf5/pull/5817

  • https://github.com/HDFGroup/hdf5/commit/7dd110251d67b2c8cfe48d2e7a0b21a2e0c06432

  • Negligible security impact

EPSS

Процентиль: 5%
0.00023
Низкий

Связанные уязвимости

CVSS3: 3.3
ubuntu
5 месяцев назад

A vulnerability, which was classified as problematic, has been found in HDF5 1.14.6. This issue affects the function H5FL__malloc of the file src/H5FL.c. The manipulation leads to memory leak. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

CVSS3: 3.3
redhat
5 месяцев назад

A vulnerability, which was classified as problematic, has been found in HDF5 1.14.6. This issue affects the function H5FL__malloc of the file src/H5FL.c. The manipulation leads to memory leak. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

CVSS3: 3.3
nvd
5 месяцев назад

A vulnerability, which was classified as problematic, has been found in HDF5 1.14.6. This issue affects the function H5FL__malloc of the file src/H5FL.c. The manipulation leads to memory leak. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

msrc
3 месяца назад

HDF5 H5FL.c H5FL__malloc memory leak

CVSS3: 3.3
github
5 месяцев назад

A vulnerability, which was classified as problematic, has been found in HDF5 1.14.6. This issue affects the function H5FL__malloc of the file src/H5FL.c. The manipulation leads to memory leak. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

EPSS

Процентиль: 5%
0.00023
Низкий