CVE-2022-36124: It is possible for a Reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system. This issue affects Rust applications…

PriorityP339high7.5CVSS 3.1

AVNACLPRNUINSUCNINAH

EPSS

1.30%

67.3th percentile

It is possible for a Reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system. This issue affects Rust applications using Apache Avro Rust SDK prior to 0.14.0 (previously known as avro-rs). Users should update to apache-avro version 0.14.0 which addresses this issue.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
apache	avro	< 0.14.0	0.14.0
apache_software_foundation	apache_avro	>= unspecified < 0.14.0	0.14.0

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.