CVE-2022-36125

概要

参考情報

• lists.apache.org/thread/t1r5xz0pvhm4tosqopjpj6dz8zlsht07 · Mailing List

avro のその他の脆弱性

• CVE-2025-33042高 7.3Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Avro Java SDK when generating specific records from untrus…
• CVE-2024-47561高 7.3Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code. Users are recommende…
• CVE-2023-39410高 7.5When deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints and thus lead t…
• CVE-2022-36124高 7.5It is possible for a Reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system. This issue affect…
• CVE-2022-35724高 7.5It is possible to provide data to be read that leads the reader to loop in cycles endlessly, consuming CPU. This issue affects Rust applicat…