CVE-2025-2308

Summary

CVE-2025-2308 is a critical vulnerability identified in HDF5 1.14.6. The issue lies within the H5Z__scaleoffset_decompress_one_byte function of the Scale-Offset Filter component. This vulnerability results in a heap-based buffer overflow, making it exploitable through local attacks. The existence of this vulnerability is currently in question, as its authenticity has not been officially confirmed by the vendor. Despite this uncertainty, an exploit has already been disclosed to the public. The vendor was informed about several vulnerabilities but responded with a rejection without further explanation, leaving the community in the dark regarding the validity and potential impact of this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.