Stack-based Buffer Overflow Vulnerability in NSF Unidata NetCDF-C

CVE-2025-14936

What is CVE-2025-14936?

A stack-based buffer overflow vulnerability exists in NSF Unidata NetCDF-C that enables remote attackers to execute arbitrary code. This occurs due to insufficient validation of the length of user-supplied attribute names, allowing an attacker to manipulate data and exploit the flaw when a user visits a malicious website or opens a compromised file. The risk escalates as the exploitation is contingent on user interaction, emphasizing the importance of awareness and caution against potential attack vectors.

References