CVE-2025-6856 HDF5 H5FL.c H5FL__reg_gc_list use after free

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple HDF5 Vulnerabilities Identified: CVE-2025-6856 and CVE-2025-2913 Two vulnerabilities in the HDF5 library have been identified, CVE-2025-6856 and CVE-2025-2913, both related to use-after-free issues in the H5FL.c file. These vulnerabilities could potentially affect systems utilizing the HDF5 library, which is widely used for managing large datasets. 2 sources 41