What is CVE-2026-26197?

CVE-2026-26197 is a security advisory published by Microsoft Security Response Center (MSRC) with Medium severity. Array full size, element count, and element size are not checked to make sure they match in H5Odtype.c

Which CVE IDs does CVE-2026-26197 cover?

CVE-2026-26197 covers the following CVE IDs: CVE-2026-26197. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by CVE-2026-26197?

CVE-2026-26197 affects 2 products, including: azl3 hdf5 1.14.6-2 on Azure Linux 3.0; azl3 hdf5 1.14.6-4 on Azure Linux 3.0.

CVE-2026-26197Medium

Array full size, element count, and element size are not checked to make sure they match in H5Odtype.c

Vendor

Microsoft Security Response Center (MSRC)

Published

July 23, 2026

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2026-26197 →

🎯 Affected products2

azl3 hdf5 1.14.6-2 on Azure Linux 3.0
azl3 hdf5 1.14.6-4 on Azure Linux 3.0

✅ Remediation

KBCBL-Mariner Releases (Security Update) — fixed build 1.14.6-4

🔗 References (2)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26197
referencehttps://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade