CVE-2025-6857: Hdfgroup HDF5

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

A vulnerability has been found in HDF5 1.14.6 and classified as problematic. Affected by this vulnerability is the function H5G__node_cmp3 of the file src/H5Gnode.c. The manipulation leads to stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.

Affected products

• Hdfgroup HDF5: version 1.14.6 only

Published 2025-06-29. Last modified 2026-06-17.