CVE-2025-2153 HDF5 h5 File H5SM.c H5SM_delete heap-based overflow
A heap-based buffer overflow in HDF5 allows remote attackers to execute arbitrary code or cause denial of service via crafted files.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2025-2153?
CVE-2025-2153 is a low-severity memory corruption vulnerability in Hdfgroup Hdf5, published on 10 Mar 2025. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
A vulnerability, which was classified as critical, was found in HDF5 1.14.6. Affected is the function H5SM_delete of the file H5SM.c of the component h5 File Handler. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used.
Which versions are affected by CVE-2025-2153?
It affects 1 product.
Products include Hdfgroup Hdf5.
How do I fix CVE-2025-2153?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2025-2153 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-2153 exists.
Other vulnerabilities in Hdfgroup Hdf5
Sources
Also known as AZL-58366, AZL-58368, DEBIAN-CVE-2025-2153, ECHO-e4fc-f276-c1cc, GHSA-q2jx-5x2v-8hrm, JLSEC-2026-325 and 3 more.