Msrc Cbl2 Hdf5 1.14.6-2 On Cbl Mariner 2.0 vulnerabilities

CVE-2025-44904 [HIGH] CWE-122 hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5VM_memcpyvv function. hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5VM_memcpyvv function. Mariner: Mariner mitre: mitre Customer Action Required: Yes

CVE-2025-2915 [MEDIUM] CWE-122 HDF5 H5Faccum.c H5F__accum_free heap-based overflow HDF5 H5Faccum.c H5F__accum_free heap-based overflow FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the dist

CVE-2025-2308 [MEDIUM] CWE-122 HDF5 Scale-Offset Filter H5Z__scaleoffset_decompress_one_byte heap-based overflow HDF5 Scale-Offset Filter H5Z__scaleoffset_decompress_one_byte heap-based overflow FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secu

CVE-2025-2309 [MEDIUM] CWE-122 HDF5 Type Conversion Logic H5T__bit_copy heap-based overflow HDF5 Type Conversion Logic H5T__bit_copy heap-based overflow FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries w