Product · Apache Software Foundation

Apache Arrow R package

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.8

CVE-2024-52338

Apache Arrow R package: Arbitrary code execution when loading a malicious data file

Deserialization of untrusted data in IPC and Parquet readers in the Apache Arrow R package versions 4.0.0 through 16.1.0 allows arbitrary code execution. An application is vulnerable if it reads Arrow IPC, Feather or Parquet data from untrusted sources (for e…

Apache Software Foundation Apache Arrow R package kubeflow-pipelines-visualization-server ceph Azure Linux Wolfi PyPI

Nov 28, 2024