Skip to content
OpenAdvisories

Package · RubyGems

red-arrow

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.5
    CVE-2019-12408

    Missing Initialization of Resource in Apache Arrow

    It was discovered that the C++ implementation (which underlies the R, Python and Ruby implementations) of Apache Arrow 0.14.0 to 0.14.1 had a uninitialized memory bug when building arrays with null values in some cases. This can lead to uninitialized memory b…

    Apache Software Foundation Apache Arrow pyarrow red-arrow PyPI RubyGems
  • High 7.5
    CVE-2019-12410

    Missing Initialization of Resource in Apache Arrow

    While investigating UBSAN errors in https://github.com/apache/arrow/pull/5365 it was discovered Apache Arrow versions 0.12.0 to 0.14.1, left memory Array data uninitialized when reading RLE null data from parquet. This affected the C++, Python, Ruby and R imp…

    Apache Software Foundation Apache Arrow pyarrow red-arrow PyPI RubyGems