CVE-2025-27821CWE-787

HDFS native client: Out of bounds write in URI parser of native HDFS client

High · published January 26, 2026

CVSS v3.1
7.3
EPSS
1%
Percentile
59.5
In the wild
Unconfirmed
What it is

⚡ An out-of-bounds write vulnerability in Apache Hadoop could let attackers overwrite critical data without a trace! 🔥 Think of it like a chef in a restaurant who mistakenly uses a spoon to stir a different pot entirely, accidentally mixing in ingredients where they don’t belong—what a mess! 🍲 This kind of mistake could allow an attacker to corrupt data or execute arbitrary code, leading to potential data loss or system crashes—absolutely devastating for your operations! Imagine a system that could suddenly start behaving unpredictably, or worse, fail entirely when you need it most.

Put simply

Think of it like a chef in a restaurant who mistakenly uses a spoon to stir a different pot entirely, accidentally mixing in ingredients where they don’t belong—what a mess! 🍲 This vulnerability occurs in the HDFS native client of Apache Hadoop, where improper boundary checks can allow an attacker to write data outside of the allocated memory space, leading to corruption and unexpected behavior.

What to do

This kind of mistake could allow an attacker to corrupt data or execute arbitrary code, leading to potential data loss or system crashes—absolutely devastating for your operations! Imagine a system that could suddenly start behaving unpredictably, or worse, fail entirely when you need it most. To safeguard your systems, upgrade to Apache Hadoop version 3.4.2 immediately. This patch addresses the out-of-bounds write vulnerability, ensuring your data remains intact and secure. You've got this! By taking these steps, you’ll reinforce your defenses and keep your data safe! 🛡️

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00906 · 59.5th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-01-26T09:44Z
EPSS history
Timeline
  • 26 JAN 09:44Z
    HDFS native client: Out of bounds write in URI parser of native HDFS client
    cvelistv5