CVE-2022-36125 — Integer overflow when reading corrupted .avro file in Avro Rust SDK
It is possible to crash (panic) an application by providing a corrupted data to be read. This issue affects Rust applications using Apache Avro Rust SDK prior to 0.14.0 (previou…
Published: 2022-08-09 · CVSS: 7.5 · CVSS 3.1
It is possible to crash (panic) an application by providing a corrupted data to be read. This issue affects Rust applications using Apache Avro Rust SDK prior to 0.14.0 (previously known as avro-rs). Users should update to apache-avro version 0.14.0 which addresses this issue.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7