CVE-2025-44904 hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5VM_memcpyvv function.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Heap Buffer Overflow Vulnerabilities Found in HDF5 v1.14.6 Three vulnerabilities have been identified in HDF5 version 1.14.6, specifically CVE-2025-44904 and CVE-2025-44905, both of which involve heap buffer overflows in different functions. Additionally, CVE-2025-6818 relates to a heap issue in H5Ochunk.c. Affected users should be aware of these vulnerabilities and monitor for updates. 3 sources 36