Product by Apache Software Foundation
Apache Arrow
6 known vulnerabilities in Apache Arrow (Apache Software Foundation), 1 of them actively exploited (CISA KEV).
Key figures
6
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-111497 | Out-of-Bounds Write in Google Brotli Decoder In CISA KEValso in 15 other products | 8.1 | |
| Critical | CVE-2024-52338 | Apache Arrow R package: Arbitrary code execution when loading a malicious data file | 9.8 | |
| High | CVE-2019-12410 | Apache Arrow: Use of Uninitialized Memory | 7.5 | |
| High | CVE-2019-12408 | Apache Arrow: Use of Uninitialized Memory | 7.5 | |
| High | CVE-2026-25087 | Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering | 7.0 | |
| High | CVE-2024-41178 | Apache Arrow Rust Object Store: AWS WebIdentityToken exposure in log files | 7.5 |
News
- Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emergesthehackernews,
- Node2Shell puts Microsoft and Node.js on Brotli patch dutycsoonline,
- PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flawthehackernews,
- Node2Shell CVEsfortinet-psirt,
- Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Softwarethehackernews,
- Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Datathehackernews,