Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache ORC

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.0
    CVE-2025-47436

    Apache ORC: Potential Heap Buffer Overflow during C++ LZO Decompression

    Heap-based Buffer Overflow vulnerability in Apache ORC. A vulnerability has been identified in the ORC C++ LZO decompression logic, where specially crafted malformed ORC files can cause the decompressor to allocate a 250-byte buffer but then attempts to copy …

    Apache Software Foundation Apache ORC