CVE-2025-14935

CVE-2025-14935 affects NSF Unidata NetCDF-C. The flaw is a heap-based buffer overflow in parsing of dimension names caused by insufficient validation of the length of user-supplied data before copying to a fixed-length heap buffer. This can enable remote code execution in the context of the curre...

CVE-2025-14933

NSF Unidata NetCDF-C NC Variable Integer Overflow Remote Code Execution Vulnerability (CVE-2025-14933) affects NetCDF-C parsing of NC variables. The flaw stems from insufficient validation of user-supplied data, causing an integer overflow prior to buffer allocation. Successful exploitation can a...

CVE-2025-14934

NSF Unidata NetCDF-C has a stack-based buffer overflow in parsing variable names that leads to remote code execution. The flaw arises from insufficient validation of user-supplied data length before copying to a fixed-length stack buffer. Exploitation requires user interaction (target must visit ...

CVE-2025-14932

CVE-2025-14932 affects NSF Unidata NetCDF-C. The flaw is in parsing time units, where unvalidated user-supplied data is copied into a fixed-size stack buffer, causing a stack-based buffer overflow. This enables remote code execution in the context of the current user, with user interaction requir...

CVE-2025-14936

The CVE-2025-14936 entry concerns NSF Unidata NetCDF-C. Affected component: NetCDF-C attribute name parsing. Root cause: lack of proper validation for the length of user-supplied data when copying into a fixed-length stack-based buffer, producing a stack-based buffer overflow. Impact: remote code...