CVE-2025-2914 affecting package hdf5 for versions less than 1.14.6-1

CVE-2025-2914 affecting package hdf5 for versions less than 1.14.6-1. A patched version of the package is available...

AZL-58825 CVE-2025-2310 affecting package hdf5 for versions less than 1.14.6-1

A vulnerability was found in HDF5 1.14.6 and classified as critical. This issue affects the function H5MMstrndup of the component Metadata Attribute Decoder. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and...