What’s Vulnerable › Products

Apache Software Foundation Apache Arrow vulnerabilities

6 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Apache Software Foundation Apache Arrow version is affected

Exploited Apache Software Foundation Apache Arrow vulnerabilities

• CVE-2026-111497 — Out-of-Bounds Write in Google Brotli Decoder

Latest Apache Software Foundation Apache Arrow vulnerabilities

• CVE-2026-111497 — Out-of-Bounds Write in Google Brotli Decoder (CVSS 9.8) — exploited
• CVE-2026-25087 — Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering (CVSS 7.0)
• CVE-2024-52338 — Apache Arrow R package: Arbitrary code execution when loading a malicious data file (CVSS 9.8)
• CVE-2024-41178 — Apache Arrow Rust Object Store: AWS WebIdentityToken exposure in log files (CVSS 7.5)
• CVE-2019-12410 — (CVSS 7.5)
• CVE-2019-12408 — (CVSS 7.5)