CVE-2022-36124

概要

参考情報

• lists.apache.org/thread/kj429rzo1xxjgz058qqqg0y7c0p512zo · ADVISORY

avro のその他の脆弱性

• CVE-2025-33042高 7.3Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Avro Java SDK when generating specific records from untrus…
• CVE-2024-47561高 7.3Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code. Users are recommende…
• CVE-2023-39410高 7.5When deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints and thus lead t…
• CVE-2022-36125高 7.5It is possible to crash (panic) an application by providing a corrupted data to be read. This issue affects Rust applications using Apache A…
• CVE-2022-35724高 7.5It is possible to provide data to be read that leads the reader to loop in cycles endlessly, consuming CPU. This issue affects Rust applicat…