#1108480 hdf5: CVE-2025-6818

Package:
src:hdf5
Source:
src:hdf5
Submitter:
Salvatore Bonaccorso
Date:
2025-10-20 17:39:05 UTC
Severity:
normal
Tags:
#1108480#5
Date:
2025-06-29 13:07:42 UTC
From:
To:
Hi,

The following vulnerability was published for hdf5.

CVE-2025-6818[0]:
| A vulnerability, which was classified as problematic, was found in
| HDF5 1.14.6. Affected is the function H5O__chunk_protect of the file
| /src/H5Ochunk.c. The manipulation leads to heap-based buffer
| overflow. An attack has to be approached locally. The exploit has
| been disclosed to the public and may be used.


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2025-6818
https://www.cve.org/CVERecord?id=CVE-2025-6818
[1] https://github.com/HDFGroup/hdf5/issues/5573

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore