VendorsApacheavroall versions
Vulnerabilities

Apache Avro

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

7CVEs
CVE-2024-47561
Apache Avro Java SDK: Arbitrary Code Execution when reading Avro schema (Java SDK)
Published 2024-10-03 · Analyzed
9.2EPSS 0.033
CVE-2021-43045
Possible DOS vulnerabilities in C# Avro SDK
Published 2022-01-06 · Modified
7.5EPSS 0.030
CVE-2023-39410
Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK
Published 2023-09-29 · Modified
7.5EPSS 0.018
CVE-2022-35724
Denial of service while reading data in Avro Rust SDK
Published 2022-08-09 · Modified
7.5EPSS 0.017
CVE-2022-36125
Integer overflow when reading corrupted .avro file in Avro Rust SDK
Published 2022-08-09 · Modified
7.5EPSS 0.015
CVE-2022-36124
Memory overconsumption in Avro Rust SDK
Published 2022-08-09 · Modified
7.5EPSS 0.014
CVE-2025-33042
Apache Avro Java SDK: Code injection on Java generated code
Published 2026-02-13 · Analyzed
7.3EPSS 0.006