What’s Vulnerable › Products

Apache Software Foundation Apache Avro vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Apache Software Foundation Apache Avro version is affected

Latest Apache Software Foundation Apache Avro vulnerabilities

• CVE-2025-33042 — Apache Avro Java SDK: Code injection on Java generated code (CVSS 7.3)
• CVE-2024-47561 — Apache Avro Java SDK: Arbitrary Code Execution when reading Avro schema (Java SDK) (CVSS 7.3)
• CVE-2023-39410 — Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK (CVSS 7.5)
• CVE-2022-36125 — Integer overflow when reading corrupted .avro file in Avro Rust SDK (CVSS 7.5)
• CVE-2022-36124 — Memory overconsumption in Avro Rust SDK (CVSS 7.5)
• CVE-2022-35724 — Denial of service while reading data in Avro Rust SDK (CVSS 7.5)
• CVE-2021-43045 — Possible DOS vulnerabilities in C# Avro SDK (CVSS 7.5)