← All credits

This issue was reported to the Apache Avro team by Evan Richter at ForAllSecure and found with Mayhem.

3 vulnerability records and advisories credit this contributor.

CVE-2022-36124
Memory overconsumption in Avro Rust SDK
CVE-2022-36125
Integer overflow when reading corrupted .avro file in Avro Rust SDK
CVE-2022-35724
Denial of service while reading data in Avro Rust SDK