Apache Avro vulnerabilities

• apache avro, apache software foundation avro java sdk +1 more Apache Avro Java SDK: Code injection on Java generated code CVE-2025-33042 Fix available 7.3 HighFebruary 13, 2026
• apache avro, apache software foundation avro java sdk, netapp active iq unified manager +1 more +3 more Apache Avro Java SDK: Arbitrary Code Execution when reading Avro schema (Java SDK) CVE-2024-47561 Fix available 9.2 CriticalOctober 3, 2024
• apache avro, apache software foundation avro java sdk +1 more Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK CVE-2023-39410 Fix available 7.5 HighSeptember 29, 2023
• apache avro Integer overflow when reading corrupted .avro file in Avro Rust SDK CVE-2022-36125 Fix available 7.5 HighAugust 9, 2022
• apache avro Memory overconsumption in Avro Rust SDK CVE-2022-36124 Fix available 7.5 HighAugust 9, 2022
• apache avro Denial of service while reading data in Avro Rust SDK CVE-2022-35724 Fix available 7.5 HighAugust 9, 2022
• apache avro Possible DOS vulnerabilities in C# Avro SDK CVE-2021-43045 Fix available 7.5 HighJanuary 6, 2022