CVE-2026-111959

Full vulnerability record from the local CVENow database.

Description

Out-of-bounds read vulnerability in Apache Arrow Rust (`arrow` crate), from version 33.0.0 through to versions 57.3.1, 58.4.0, 59.3.1 and 60.0.0. Improper validation of RunEndEncoded arrays in the ArrayData interface can allow reading data beyond the bounds of the child values array. Users are recommended to upgrade to versions 60.1.0, 59.3.2, 58.4.1, 57.3.2 which fixes the issue.

Severity

Not scored

CVSS score

Not available

Vulnerability status

Received

Source identifier

[email protected]

Published

2026-11-02 14:17:35.493000

Last modified

2026-11-02 14:17:35.493000

View original CVE JSON

{
  "id": "CVE-2026-111959",
  "sourceIdentifier": "[email protected]",
  "published": "2026-11-02T14:17:35.493",
  "lastModified": "2026-11-02T14:17:35.493",
  "vulnStatus": "Received",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Out-of-bounds read vulnerability in Apache Arrow Rust (`arrow` crate), from version 33.0.0 through to versions 57.3.1, 58.4.0, 59.3.1 and 60.0.0.\n\n\n\nImproper validation of RunEndEncoded arrays in the ArrayData interface can allow reading data beyond the bounds of the child values array.\n\n\n\nUsers are recommended to upgrade to versions 60.1.0, 59.3.2, 58.4.1, 57.3.2 which fixes the issue."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Apache Software Foundation",
          "product": "Apache Arrow Rust",
          "defaultStatus": "unaffected",
          "collectionURL": "https://crates.io",
          "packageName": "arrow",
          "packageURL": "pkg:cargo/arrow",
          "versions": [
            {
              "version": "60.0.0",
              "lessThan": "60.1.0",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "59.0.0",
              "lessThanOrEqual": "59.3.1",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "58.0.0",
              "lessThanOrEqual": "58.4.0",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "33.0.0",
              "lessThanOrEqual": "57.3.1",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {},
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        },
        {
          "lang": "en",
          "value": "CWE-125"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://lists.apache.org/thread.html/hnlrdk4w99b188w1zgjlctpwpg7y55o4",
      "source": "[email protected]"
    }
  ]
}