CVE-2025-14932

NSF Unidata NetCDF-C Time Unit Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NSF Unidata NetCDF-C. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of time units. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-27273.

• CWE-121
• CWE-787

• https://www.zerodayinitiative.com/advisories/ZDI-25-1153/Third Party Advisory

Published

Dec 23, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-14927Hugging Face Transformers SEW-D convert_config Code Injectio…7.8
• CVE-2025-14928Hugging Face Transformers HuBERT convert_config Code Injecti…7.8
• CVE-2025-14929Hugging Face Transformers X-CLIP Checkpoint Conversion Deser…7.8
• CVE-2025-1493IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Se…5.3
• CVE-2025-14930Hugging Face Transformers GLM4 Deserialization of Untrusted …7.8
• CVE-2025-14931Hugging Face smolagents Remote Python Executor Deserializati…10
• CVE-2025-14933NSF Unidata NetCDF-C NC Variable Integer Overflow Remote Cod…7.8
• CVE-2025-14934NSF Unidata NetCDF-C Variable Name Stack-based Buffer Overfl…7.8
• CVE-2025-14935NSF Unidata NetCDF-C Dimension Name Heap-based Buffer Overfl…7.8
• CVE-2025-14936NSF Unidata NetCDF-C Attribute Name Stack-based Buffer Overf…7.8
• CVE-2025-14937The Frontend Admin by DynamiApps plugin for WordPress is vul…7.2
• CVE-2025-14938The Listeo Core plugin for WordPress is vulnerable to unauth…5.3