CVE-2026-103634

The Apache DataSketches C++ library (repo: datasketches-cpp) is vulnerable to an out-of-bounds read and write during the deserialization of a Count-Min sketch . The root cause is that the count_min_sketch::deserialize() function fails to include the preamble in its input size check, allowing a tr...