azure linux libarrow vulnerabilities

Latest azure linux libarrow CVEs

Newest publication first

1. CVE-2024-52338 Apache Arrow R package: Arbitrary code execution when loading a malicious data file

   Published 2024-11-28

   Critical·CVSS 9.8

   Deserialization of untrusted data in IPC and Parquet readers in the Apache Arrow R package versions 4.0.0 through 16.1.0 allows arbitrary code execution. An application is vulnerable if it reads Arrow IPC, Feather or Parquet data from untrusted sources (for example, user-supplied...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.