Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-94013.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-94013
Upstream
Published
2026-07-27T16:17:04Z
Modified
2026-08-29T05:27:27Z
Summary
CVE-2026-17573 affecting package hdf5 for versions less than 1.14.6-4
Details

A double free vulnerability was discovered in the HDF5 library. Processing a crafted HDF5 file containing an oversized chunk size field via h5repack may cause the application to abort due to a double free.

References

Affected packages

Azure Linux:3 / hdf5

Package

Name
hdf5
Purl
pkg:rpm/azure-linux/hdf5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.14.6-4

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-94013.json"