AV
Product
Avro
7
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 7Medium 0Low 0
Watch
Add Avro to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-39410 | 7.5 | Sep 29 | When deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system Affected: before 1.11.3 |
| CVE-2022-36125 | 7.5 | Aug 9 | Integer overflow when reading corrupted .avro file in Avro Rust SDK Affected: before 0.14.0 |
| CVE-2022-36124 | 7.5 | Aug 9 | Memory overconsumption in Avro Rust SDK Affected: before 0.14.0 |
| CVE-2022-35724 | 7.5 | Aug 9 | Denial of service while reading data in Avro Rust SDK Affected: before 0.14.0 |
| CVE-2021-43045 | 7.5 | Jan 6 | A vulnerability in the .NET SDK of Apache Avro allows an attacker to allocate excessive resources, potentially causing a denial-of-service attack Affected: before 1.11.0 |
| CVE-2025-33042 | 7.3 | Feb 13 | Apache Avro Java SDK: Code injection on Java generated code Affected: before 1.11.5; 1.12.0; 1.12.0; 1.12.0 |
| CVE-2024-47561 | 7.3 | Oct 3 | Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code Affected: before 1.11.4 |
Showing 7