Skip to content

Commit 3266a56

Browse files
Add CHANGELOG entry for fix for CVE-2025-7067 (#5937)
Add changelog entry for CVE-2025-7067 fix, detailing heap buffer overflow resolution in H5FS__sinfo_serialize_node_cb().
1 parent 4202ae8 commit 3266a56

File tree

1 file changed

+6
-0
lines changed

1 file changed

+6
-0
lines changed

release_docs/CHANGELOG.md

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -557,6 +557,12 @@ Added Fortran wrapper h5fdsubfiling_get_file_mapping_f() for the subfiling file
557557

558558
## Library
559559

560+
### Fixed security issue CVE-2025-7067
561+
562+
Fixed a heap buffer overflow in H5FS__sinfo_serialize_node_cb() by discarding file free space sections from the file free space manager when they are found to be invalid. Specifically crafted HDF5 files can result in an attempt to insert duplicate or overlapping file free space sections into a file free space manager, later resulting in a buffer overflow when the same free space section is serialized to the file multiple times.
563+
564+
Fixes GitHub issue #5577
565+
560566
### Fixed security issue CVE-2025-2915 and OSV-2024-381
561567

562568
Fixed a heap-based buffer overflow in H5F__accum_free caused by an integer overflow when calculating new_accum_size. Added validation in H5O__mdci_decode to detect and reject invalid values early, preventing the overflow condition.

0 commit comments

Comments
 (0)