CVE-2023-39410
UNKNOWN
Published 2023-09-29T16:23:34.021Z
Actions:
No CVSS data available
Description
When deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system.
This issue affects Java applications using Apache Avro Java SDK up to and including 1.11.2. Users should update to apache-avro version 1.11.3 which addresses this issue.
Available Exploits
No exploits available for this CVE.
Related News
No news articles found for this CVE.
Affected Products
Affected Versions:
References
Published: 2023-09-29T16:23:34.021Z
Last Modified: 2025-02-13T17:03:03.075Z
Copied to clipboard!