CVE-2025-2310

Summary

CVE-2025-2310 is a critical vulnerability identified in HDF5 1.14.6. It impacts the H5MM_strndup function within the Metadata Attribute Decoder, leading to a heap-based buffer overflow. This issue can be exploited locally, and the exploit has been disclosed to the public. However, the authenticity of the vulnerability is currently under debate. The vendor was contacted about several vulnerabilities but responded with a rejection without providing any explanation. Further details are awaited to confirm the existence and impact of this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.