CVE-2022-36124CWE-770

Memory overconsumption in Avro Rust SDK

High · published August 9, 2022

CVSS v3.1
7.5
EPSS
1%
Percentile
73.5
In the wild
Unconfirmed
What it is

It is possible for a Reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system. This issue affects Rust applications using Apache Avro Rust SDK prior to 0.14.0 (previously known as avro-rs). Users should update to apache-avro version 0.14.0 which addresses this issue.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01467 · 73.5th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2022-08-09T06:50Z
EPSS history
Timeline
  • 09 AUG 06:50Z
    Memory overconsumption in Avro Rust SDK
    cvelistv5