CVE-2025-2310
A vulnerability was found in HDF5 1.14.6 and classified as critical. This issue affects the function H5MM_strndup of the component Metadata Attribute Decoder. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The vendor plans to fix this issue in an upcoming release.
Vendor
Product
CWE
Yayın Tarihi
2025-03-14 21:15:37
Güncelleme
2025-05-28 18:12:42
Source Identifier
cna@vuldb.com
KEV Date Added
-