CVE-2025-6516 Information

Description

A vulnerability has been found in HDF5 up to 1.14.6 and classified as critical. This vulnerability affects the function H5F_addr_decode_len of the file /hdf5/src/H5Fint.c. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Reference

https://github.com/HDFGroup/hdf5/issues/5581 https://github.com/user-attachments/files/20626851/reproduce.tar.gz https://vuldb.com/?ctiid.313636 https://vuldb.com/?id.313636 https://vuldb.com/?submit.592589

Attack Complexity

LOW

Privileges Required

LOW

User Interaction Required

LOW

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

LOW

Availability Impact

LOW

Base Score

LOW

Base Severity

5.3

Related CNNVD

CNNVD-202506-2927 (Published: 2025-06-23)