A vulnerability classified as problematic was found in HDF5 up to 1.14.6. This vulnerability affects the function H5F__accum_free of the file src/H5Faccum.c. The manipulation of the argument overlap_size leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A vulnerability classified as problematic was found in HDF5 up to 1.14.6. This vulnerability affects the
    function H5F__accum_free of the file src/H5Faccum.c. The manipulation of the argument overlap_size leads
    to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the
    public and may be used. (CVE-2025-2915)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A vulnerability classified as problematic was found in HDF5 up to 1.14.6. This vulnerability affects the     function H5F__accum_free of the file src/H5Faccum.c. The manipulation of the argument overlap_size leads     to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the     public and may be used. (CVE-2025-2915)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
463024	Echo: hdf5: security update to 1.14.5+repack-3+e5	Tenable Cloud Security	Echo Local Security Checks	Local	medium
463024	Echo: hdf5: security update to 1.14.5+repack-3+e5	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
243666	Linux Distros Unpatched Vulnerability : CVE-2025-2915	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2025-2915

medium

Tenable Plugins

medium

medium

medium