apache arrow vulnerabilities (CVE)

CVE records published for apache arrow, newest first. Follow to get an email when a new one appears.

2 results
9.2Critical
CVE-2026-111497 KEV

Out-of-Bounds Write in Google Brotli Decoder

Google Brotli; Siemens Desigo CC family V8; Siemens Desigo CC family V9; Siemens Heliox Dual Port 60kW

A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause …

83%EPSS