CVE-2025-2912

CVE-2025-2912 (HDF5) affects HDF5 up to 1.14.6. The vulnerability is in the function H5O_msg_flush (src/H5Omessage.c) where manipulation of the argument oh leads to a heap-based buffer overflow. Exploitation requires local access, and public disclosure of the exploit is noted. Connected OSV entri...