CVE-2025-7068
BaseFortify
Publication date: 2025-07-04
Last updated on: 2026-04-29
Assigner: VulDB
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| hdfgroup | hdf5 | 1.14.6 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-404 | The product does not release or incorrectly releases a resource before it is made available for re-use. |
| CWE-401 | The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse. |
Attack-Flow Graph
AI Powered Q&A
How can this vulnerability impact me? :
The vulnerability can lead to a memory leak when exploited locally, which may degrade system performance or cause resource exhaustion over time. However, it does not directly impact confidentiality or integrity since it does not allow data disclosure or modification.
Can you explain this vulnerability to me?
This vulnerability is a memory leak issue found in the HDF5 library version 1.14.6, specifically in the function H5FL__malloc within the file src/H5FL.c. It requires local access to exploit and involves manipulation that causes memory to be improperly managed, leading to a leak.