Beveiligingsadvies

CVE-2025-2310

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-03-14 21:00:09

Laatst bijgewerkt 2025-05-08 08:59:00

Toegewezen door VulDB

CVSS-score 5.3

Status PUBLISHED

Beschrijving

A vulnerability was found in HDF5 1.14.6 and classified as critical. This issue affects the function H5MM_strndup of the component Metadata Attribute Decoder. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The vendor plans to fix this issue in an upcoming release.

← Alle CVE's bekijken Bekijk op cve.org ↗