Apache Avro Java Sdk
Approved changes feed: RSS · Atom
cpe:2.3:a:apache_software_foundation:apache_avro_java_sdk:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Apache Software Foundation (f563070d-e18f-561b-b86c-987936937e8a) |
|---|---|
| Product | Apache Avro Java Sdk (514ff879-394c-5e71-8afe-99e9da1d5d91) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-33042 |
vulnerable | 2026-06-08 07:19:01.434252 |
Apache Avro Java SDK: Code injection on Java generated code
Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Avro Java SDK when generating specific records from untrusted Avro schemas.
This issue affects Apache Avro Java SDK: all versions through 1.11.4 and version 1.12.0.
Users are recommended to upgrade to version 1.12.1 or 1.11.5, which fix the issue.
Published: 2026-02-13T11:47:03.783Z
Updated: 2026-02-13T18:05:35.038Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47561 |
vulnerable | 2026-06-08 06:48:12.695238 |
Apache Avro Java SDK: Arbitrary Code Execution when reading Avro schema (Java SDK)
Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code.
Users are recommended to upgrade to version 1.11.4 or 1.12.0, which fix this issue.
Published: 2024-10-03T10:23:16.214Z
Updated: 2024-10-21T08:51:22.972Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39410 |
vulnerable | 2026-06-08 06:09:37.330879 |
Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK
When deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system.
This issue affects Java applications using Apache Avro Java SDK up to and including 1.11.2. Users should update to apache-avro version 1.11.3 which addresses this issue.
Published: 2023-09-29T16:23:34.021Z
Updated: 2025-02-13T17:03:03.075Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.