CVE-2025-2926

CVE-2025-2926 affects HDF5 up to 1.14.6. The issue is a null pointer dereference in H5O__cache_chk_serialize (src/H5Ocache.c). Local access is required to exploit; exploitation has been disclosed publicly. OSV entries corroborate this CVE and note a fix is planned/available via a patched package ...