Aller au contenu
Se connecter
9.2 Critique

CVE-2024-47561 Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code

Description

Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code. Users are recommended to upgrade to version 1.11.4  or 1.12.0, which fix this issue.

Produits et versions touchés

Produit Versions touchées Corrigé en
Apache Avro Java SDK 1.11 premières → < 1.11.4 1.11.4
avro 1.11 premières → < 1.11.4 1.11.4

Autres CVE de Apache Avro Java SDK

Les 3 CVE de Apache Avro Java SDK →
CVE-2025-33042 Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Avro Java SDK when generating specific… Non notée CVE-2023-39410 When deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed… Non notée
Suivre cette CVE