Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-94019.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-94019
Upstream
Published
2026-07-27T16:17:04Z
Modified
2026-08-29T05:27:27Z
Summary
CVE-2026-17574 affecting package hdf5 for versions less than 1.14.6-4
Details

HDF5 contains a NULL pointer dereference vulnerability. Processing a crafted HDF5 file containing an attribute with an invalid variable-length datatype type field may cause the application to crash when the attribute is read.

References

Affected packages

Azure Linux:3 / hdf5

Package

Name
hdf5
Purl
pkg:rpm/azure-linux/hdf5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.14.6-4

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-94019.json"