CVE-2026-103513

The Apache DataSketches C++ library (repository: datasketches-cpp ) is vulnerable to out-of-bounds read and write during CPC sketch deserialization. The root cause is a failure to validate the read position during decoding and a lack of validation for decoded row indices and header fields (includ...

EUVD-2026-96307

Out-of-bounds read and write in the CPC sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. A crafted serialized CPC sketch passed to cpcsketch::deserialize, from either a byte buffer or a stream, can cause the decompressor to read past the end of the compressed data, becaus...

PT-2026-109641

Name of the Vulnerable Software and Affected Versions Apache DataSketches C++ versions 2.0.0-incubating through 5.2.9 Description An out-of-bounds read and write occurs during the deserialization of CPC sketches. A crafted serialized CPC sketch passed to the cpc sketch::deserialize function,...