https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:05:05.479524+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2025-18668 cnvd-2025-18668 2026-10-03T04:05:05.523007+00:00 cnvd-2025-18668 https://cve.radiocsirt.org/vuln/euvd-2026-238396 EUVD-2026-238396 2026-10-03T04:05:05.523046+00:00 EUVD-2026-238396 https://cve.radiocsirt.org/vuln/fkie_cve-2025-2310 fkie_cve-2025-2310 2026-10-03T04:05:05.523060+00:00

A vulnerability was found in HDF5 1.14.6 and classified as critical. This issue affects the function H5MM_strndup of the component Metadata Attribute Decoder. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The vendor plans to fix this issue in an upcoming release.

 https://cve.radiocsirt.org/vuln/ghsa-qxwf-xj2v-qm83 GHSA-qxwf-xj2v-qm83 2026-10-03T04:05:05.523090+00:00

A vulnerability was found in HDF5 1.14.6 and classified as critical. This issue affects the function H5MM_strndup of the component Metadata Attribute Decoder. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The vendor was contacted early about a batch of vulnerabilities. His response was "reject" without further explanation. We have not received an elaboration even after asking politely for further details. Currently we assume that the vendor wants to "dispute" the entries which is why they are flagged as such until further details become available.

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-2310 msrc_CVE-2025-2310 — HDF5 Metadata Attribute Decoder H5MM_strndup heap-based overflow 2026-10-03T04:05:05.523110+00:00 msrc_CVE-2025-2310 https://cve.radiocsirt.org/vuln/oesa-2026-1131 OESA-2026-1131 — hdf5 security update 2026-10-03T04:05:05.523129+00:00

Affected: openEuler:24.03-LTS-SP3: hdf5

HDF5 is a data model, library, and file format for storing and managing data. It supports an unlimited variety of datatypes, and is designed for flexible and efficient I/O and for high volume and complex data. HDF5 is portable and is extensible, allowing applications to evolve in their use of HDF5. The HDF5 Technology suite includes tools and applications for managing, manipulating, viewing, and analyzing data in the HDF5 format. Security Fix(es):

A vulnerability, which was classified as critical, was found in HDF5 1.14.6. Affected is the function H5SM_delete of the file H5SM.c of the component h5 File Handler. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used.(CVE-2025-2153)

A vulnerability was found in HDF5 1.14.6 and classified as critical. This issue affects the function H5MM_strndup of the component Metadata Attribute Decoder. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The vendor plans to fix this issue in an upcoming release.(CVE-2025-2310)

A vulnerability was found in HDF5 up to 1.14.6. It has been declared as problematic. Affected by this vulnerability is the function H5O_msg_flush of the file src/H5Omessage.c. The manipulation of the argument oh leads to hea…

 https://cve.radiocsirt.org/vuln/rhsa-2025:23731 RHSA-2025:23731 — Red Hat Security Advisory: RHEL AI 3.0 hdf5 security update 2026-10-03T04:05:05.523184+00:00

HDF5: HDF5 Metadata Attribute Decoder H5MM_strndup heap-based overflow hdf5: HDF5 heap-based overflow hdf5: HDF5 heap-based overflow

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-2310 UBUNTU-CVE-2025-2310 2026-10-03T04:05:05.523205+00:00

Affected: Ubuntu:Pro:14.04:LTS: hdf5, Ubuntu:Pro:16.04:LTS: hdf5, Ubuntu:Pro:18.04:LTS: hdf5, Ubuntu:Pro:20.04:LTS: hdf5, Ubuntu:22.04:LTS: hdf5, Ubuntu:24.04:LTS: hdf5, Ubuntu:25.10: hdf5, Ubuntu:26.04:LTS: hdf5

A vulnerability was found in HDF5 1.14.6 and classified as critical. This issue affects the function H5MM_strndup of the component Metadata Attribute Decoder. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The vendor plans to fix this issue in an upcoming release.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2907 WID-SEC-W-2025-2907 — Red Hat Enterprise Linux AI (HDF5 ): Mehrere Schwachstellen ermöglichen Manipulation von Dateien 2026-10-03T04:05:05.523247+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux AI ausnutzen, um Dateien zu manipulieren, was möglicherweise die Ausführung von beliebigem Code oder einen Denial-of-Service-Zustand ermöglicht.