A heap‑based buffer overflow in the HDF5 library — specifically in the H5F__accum_free function inside src/H5Faccum.c and tracked as CVE‑2025‑2915 — has been publicly disclosed, includes a reproducible proof‑of‑concept and affects HDF5 releases up to and including 1.14.6; the immediate, reliable...