https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 02:39:56 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-71560 <p>Out-of-bounds Read vulnerability in Apache Fory C++ deserialization.</p> <p>This issue affects Apache Fory C++ versions from 0.14.0 before 1.5.0 when deserializing structs containing tagged integer fields. A crafted input payload may trigger an out-of-bounds heap read in the tagged integer fast-path deserializer, potentially causing information disclosure or denial of service.</p> <p>Users are recommended to upgrade to Apache Fory 1.5.0, which fixes this issue. Applications that do not use Apache Fory C++ or do not use tagged integer fields are not affected.</p> <p>Out-of-bounds Read vulnerability in Apache Fory C++ deserialization.</p> <p>This issue affects Apache Fory C++ versions from 0.14.0 before 1.5.0 when deserializing structs containing tagged integer fields. A crafted input payload may trigger an out-of-bounds heap read in the tagged integer fast-path deserializer, potentially causing information disclosure or denial of service.</p> <p>Users are recommended to upgrade to Apache Fory 1.5.0, which fixes this issue. Applications that do not use Apache Fory C++ or do not use tagged integer fields are not affected.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-71560 https://vulnerability.circl.lu/vuln/ghsa-r6vj-r3jc-f9gp <p>Out-of-bounds Read vulnerability in Apache Fory C++ deserialization.</p> <p>This issue affects Apache Fory C++ versions from 0.14.0 before 1.5.0 when deserializing structs containing tagged integer fields. A crafted input payload may trigger an out-of-bounds heap read in the tagged integer fast-path deserializer, potentially causing information disclosure or denial of service.</p> <p>Users are recommended to upgrade to Apache Fory 1.5.0, which fixes this issue. Applications that do not use Apache Fory C++ or do not use tagged integer fields are not affected.</p> <p>Out-of-bounds Read vulnerability in Apache Fory C++ deserialization.</p> <p>This issue affects Apache Fory C++ versions from 0.14.0 before 1.5.0 when deserializing structs containing tagged integer fields. A crafted input payload may trigger an out-of-bounds heap read in the tagged integer fast-path deserializer, potentially causing information disclosure or denial of service.</p> <p>Users are recommended to upgrade to Apache Fory 1.5.0, which fixes this issue. Applications that do not use Apache Fory C++ or do not use tagged integer fields are not affected.</p> https://vulnerability.circl.lu/vuln/ghsa-r6vj-r3jc-f9gp