CVE-2025-6818 HDF5 H5Ochunk.c H5O__chunk_protect heap

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Heap Buffer Overflow Vulnerabilities Found in HDF5 v1.14.6 Three vulnerabilities have been identified in HDF5 version 1.14.6, specifically CVE-2025-44904 and CVE-2025-44905, both of which involve heap buffer overflows in different functions. Additionally, CVE-2025-6818 relates to a heap issue in H5Ochunk.c. Affected users should be aware of these vulnerabilities and monitor for updates. 3 sources 36