https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T14:08:59.154329+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-71560 CVE-2026-71560 — Apache Fory: Out-of-bounds heap read in C++ struct deserializer tagged-int fast-path 2026-10-09T14:08:59.174443+00:00

Affected: Apache Software Foundation Apache Fory

Out-of-bounds Read vulnerability in Apache Fory C++ deserialization.

This issue affects Apache Fory C++ versions from 0.14.0 before 1.5.0 when deserializing structs containing tagged integer fields. A crafted input payload may trigger an out-of-bounds heap read in the tagged integer fast-path deserializer, potentially causing information disclosure or denial of service.

Users are recommended to upgrade to Apache Fory 1.5.0, which fixes this issue. Applications that do not use Apache Fory C++ or do not use tagged integer fields are not affected.