CyberICT

CVE-2025-44904

Microsoft · Published December 20, 2025

CVSS v3.1

HIGH
Patch availableGet patch

Description

hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5VM_memcpyvv function.. hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5VM_memcpyvv function.

Affected Products

  • cbl2 hdf5 1.14.6-1 on CBL Mariner 2.0
  • azl3 hdf5 1.14.6-2 on Azure Linux 3.0
  • cbl2 hdf5 1.14.6-2 on CBL Mariner 2.0
  • cbl2 hdf5 1.14.6-2

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H