CVE-2026-111959

A flaw was found in arrow. Improper validation of RunEndEncoded run-end encoded arrays in the ArrayData interface allows an attacker to read data beyond the bounds of the child values array by supplying specially crafted data. This out-of-bounds read flaw may lead to information disclosure or a...