CVE-2022-35724: It is possible to provide data to be read that leads the reader to loop in cycles endlessly, consuming CPU. This issue affects Rust applications using Apache…

PriorityP339high7.5CVSS 3.1

AVNACLPRNUINSUCNINAH

EPSS

1.58%

72.8th percentile

It is possible to provide data to be read that leads the reader to loop in cycles endlessly, consuming CPU. This issue affects Rust applications using Apache Avro Rust SDK prior to 0.14.0 (previously known as avro-rs). Users should update to apache-avro version 0.14.0 which addresses this issue.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
apache	avro	< 0.14.0	0.14.0
apache_software_foundation	apache_avro	>= unspecified < 0.14.0	0.14.0

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.