Out-of-bounds Write vulnerability in Apache DataSketches C++. An
application that deserializes a REQ sketch from an untrusted source
can have heap memory corrupted by a crafted sketch, because the
serialized compactor headers were not validated.
This issue affects Apache DataSketches C++: from 3.0.0 through 5.3.0.
Users are recommended to upgrade to version 5.3.1, which fixes the
issue.
Bu kayıt NIST NVD kaynağından aktarılmıştır. Etkilenen sürümler, güncel değerlendirme ve üretici referansları için kaynak kaydı inceleyin.