OSV-2020-42 Heap-buffer-overflow in bool arrow::util::RleDecoder::NextCounts<int>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20695 Crash type: Heap-buffer-overflow WRITE Crash state: bool arrow::util::RleDecoder::NextCounts int arrow::util::RleDecoder::GetBatchWithDictSpaced virtual thunk to parquet::DictDecoderImplparquet::PhysicalType...

OSV-2020-52 Heap-buffer-overflow in int arrow::util::RleDecoder::GetBatchWithDictSpaced<double>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20665 Crash type: Heap-buffer-overflow READ 8 Crash state: int arrow::util::RleDecoder::GetBatchWithDictSpaced virtual thunk to parquet::DictDecoderImplparquet::PhysicalType...

PT-2020-22313

Name of the Vulnerable Software and Affected Versions Apache Arrow affected versions not specified Description A heap buffer overflow issue has been identified. The crash occurs in the arrow::util::RleDecoder::NextCounts and arrow::util::RleDecoder::GetBatchWithDictSpaced functions. This issue is...

PT-2020-22374

Name of the Vulnerable Software and Affected Versions Parquet affected versions not specified Description The issue is related to a heap-buffer-overflow read crash in the RleDecoder::GetBatchWithDictSpaced function, specifically when handling double data types. This crash occurs within the...

PT-2020-22218

Name of the Vulnerable Software and Affected Versions parquet affected versions not specified Description The issue is related to a crash type of UNKNOWN READ. It involves the parquet::DictDecoderImpl and parquet::ColumnReaderImplBase functions. No information is provided about the estimated numb...