Product by Apache Software Foundation

    Apache Avro

    7 known vulnerabilities in Apache Avro (Apache Software Foundation), 0 of them actively exploited (CISA KEV).

    Key figures

    7

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Apache Avro (Apache Software Foundation)
    CriticalCVE-2024-47561

    Apache Avro Java SDK: Arbitrary Code Execution when reading Avro schema (Java SDK)

    also in 4 other products

    		7.3
    HighCVE-2021-43045

    Possible DOS vulnerabilities in C# Avro SDK

    also in 1 other product

    		7.5
    HighCVE-2023-39410

    Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK

    also in 1 other product

    		7.5
    HighCVE-2022-35724

    Denial of service while reading data in Avro Rust SDK

    also in 1 other product

    		7.5
    HighCVE-2022-36125

    Integer overflow when reading corrupted .avro file in Avro Rust SDK

    also in 1 other product

    		7.5
    HighCVE-2022-36124

    Memory overconsumption in Avro Rust SDK

    also in 1 other product

    		7.5
    HighCVE-2025-33042

    Apache Avro Java SDK: Code injection on Java generated code

    also in 2 other products

    		7.3

    All products by Apache Software Foundation