Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Arrow

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.0
    CVE-2026-25087

    Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering

    Use After Free vulnerability in Apache Arrow C++. This issue affects Apache Arrow C++ from 15.0.0 through 23.0.0. It can be triggered when reading an Arrow IPC file (but not an IPC stream) with pre-buffering enabled, if the IPC file contains data with variadi…

    Apache Software Foundation Apache Arrow pyarrow apache-arrow Debian PyPI
  • High 7.5
    CVE-2019-12408

    Missing Initialization of Resource in Apache Arrow

    It was discovered that the C++ implementation (which underlies the R, Python and Ruby implementations) of Apache Arrow 0.14.0 to 0.14.1 had a uninitialized memory bug when building arrays with null values in some cases. This can lead to uninitialized memory b…

    Apache Software Foundation Apache Arrow pyarrow red-arrow PyPI RubyGems
  • High 7.5
    CVE-2019-12410

    Missing Initialization of Resource in Apache Arrow

    While investigating UBSAN errors in https://github.com/apache/arrow/pull/5365 it was discovered Apache Arrow versions 0.12.0 to 0.14.1, left memory Array data uninitialized when reading RLE null data from parquet. This affected the C++, Python, Ruby and R imp…

    Apache Software Foundation Apache Arrow pyarrow red-arrow PyPI RubyGems