Vulnerability CVE-2022-36124


Published: 2022-08-09

Description:
It is possible for a Reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system. This issue affects Rust applications using Apache Avro Rust SDK prior to 0.14.0 (previously known as avro-rs). Users should update to apache-avro version 0.14.0 which addresses this issue.

 References:
https://lists.apache.org/thread/kj429rzo1xxjgz058qqqg0y7c0p512zo

Copyright 2026, cxsecurity.com

 

Back to Top