OESA-2026-1007 hdf5 security update

🗓️ 09 Jan 2026 14:05:37Reported by GoogleType

osv🔗 osv.dev👁 3 Views

HDF5 security update fixes heap overflow vulnerabilities in version 1.14.6, including remote and local exploitability.

Reporter	Title	Published	Views	Family All 102
AlpineLinux	CVE-2025-2914	28 Mar 202516:31	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в hdf5	3 May 202623:59	–	astralinux
CBLMariner	CVE-2025-2153 affecting package hdf5 for versions less than 1.14.6-1	7 Jan 202619:09	–	cbl_mariner
CBLMariner	CVE-2025-2153 affecting package hdf5 for versions less than 1.14.6-1	12 Jan 202621:27	–	cbl_mariner
CBLMariner	CVE-2025-2914 affecting package hdf5 for versions less than 1.14.6-1	12 Jan 202621:27	–	cbl_mariner
CBLMariner	CVE-2025-2914 affecting package hdf5 for versions less than 1.14.6-1	7 Jan 202619:09	–	cbl_mariner
CBLMariner	CVE-2025-6816 affecting package hdf5 for versions less than 1.14.6-1	7 Jan 202619:09	–	cbl_mariner
CBLMariner	CVE-2025-6750 affecting package hdf5 for versions less than 1.14.6-1	7 Jan 202619:09	–	cbl_mariner
CBLMariner	CVE-2025-6816 affecting package hdf5 for versions less than 1.14.6-1	12 Jan 202621:27	–	cbl_mariner
CBLMariner	CVE-2025-6750 affecting package hdf5 for versions less than 1.14.6-1	12 Jan 202621:27	–	cbl_mariner

Source	Link
openeuler	www.openeuler.org/zh/security/security-bulletins/detail/
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-2153
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-2914
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-6750
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-6816

09 Jan 2026 14:30Current

5.6Medium risk

Vulners AI Score5.6

CVSS 3.15 - 8.1

CVSS 44.8

CVSS 25.1

CVSS 35

EPSS0.00145

SSVC