OSV-2020-138 Heap-buffer-overflow in org::apache::arrow::flatbuf::Message::Verify

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21681 Crash type: Heap-buffer-overflow READ 4 Crash state: org::apache::arrow::flatbuf::Message::Verify arrow::ipc::CheckMetadataAndGetBodyLength arrow::ipc::MessageDecoder::MessageDecoderImpl::ConsumeMetadata...

PT-2020-21853

Name of the Vulnerable Software and Affected Versions Apache Arrow affected versions not specified Description The issue is related to a heap buffer overflow read. Technical details about the crash include the org::apache::arrow::flatbuf::Message::Verify function,...