Buffer Overflow Vulnerability in NSF Unidata NetCDF-C Software by NVIDIA
CVE-2025-14934

7.8HIGH

Key Information:

Vendor

Nsf Unidata

Status
Netcdf-c
Vendor
CVE Published:
23 December 2025

What is CVE-2025-14934?

A vulnerability exists in NSF Unidata NetCDF-C that could allow remote attackers to execute arbitrary code through crafted variable names. The flaw stems from improper validation of user-supplied data length before copying it to a fixed-length buffer. Exploitation requires user interaction, prompting the target to visit a malicious webpage or open a compromised file, which can lead to code execution in the context of the current user. This highlights a significant security risk for installations of NSF Unidata NetCDF-C.

Affected Version(s)

NetCDF-C dbe0cbb9ff3f706009cf4ee011adf3e58d8a81c1

References

https://www.zerodayinitiative.com/advisories/ZDI-25-1152/
x_research-advisory

CVSS V3.0

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.