Skip to content
OpenAdvisories
Medium WID-SEC-2025-2907 3 CVEs

Red Hat Enterprise Linux AI (HDF5 ): Mehrere Schwachstellen ermöglichen Manipulation von Dateien

Published Dec 21, 2025 · Updated Dec 21, 2025 · de-DE

Vendor: Red Hat Product: Enterprise Linux

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux AI ausnutzen, um Dateien zu manipulieren, was möglicherweise die Ausführung von beliebigem Code oder einen Denial-of-Service-Zustand ermöglicht.

Product

Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution.

Vulnerabilities 3

  • Medium 5.3
    CVE-2025-2310

    HDF5 Metadata Attribute Decoder H5MM_strndup heap-based overflow

    A vulnerability was found in HDF5 1.14.6 and classified as critical. This issue affects the function H5MM_strndup of the component Metadata Attribute Decoder. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploi…

    hdf5 hdf5 hdf5 Debian Ubuntu Azure Linux
  • Medium 5.3
    CVE-2025-6269

    HDF5 H5Cimage.c H5C__reconstruct_cache_entry heap-based overflow

    A vulnerability classified as critical was found in HDF5 up to 1.14.6. Affected by this vulnerability is the function H5C__reconstruct_cache_entry of the file H5Cimage.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement…

    hdf5 hdf5 hdf5 Debian Ubuntu Azure Linux
  • Medium 5.3
    CVE-2025-6516

    HDF5 H5Fint.c H5F_addr_decode_len heap-based overflow

    A vulnerability has been found in HDF5 up to 1.14.6 and classified as critical. This vulnerability affects the function H5F_addr_decode_len of the file /hdf5/src/H5Fint.c. The manipulation leads to heap-based buffer overflow. An attack has to be approached lo…

    hdf5 hdf5 Debian Ubuntu

Revision history

  1. #1

    Initiale Fassung

References