Use After Free

Overview Affected versions of this package are vulnerable to Use After Free in the RecordBatchFileReader::PreBufferMetadata API call . An attacker can cause memory corruption or application crashes by providing a specially crafted IPC file with variadic buffers and exploiting multi-threaded IO...

PT-2026-20319

Name of the Vulnerable Software and Affected Versions Apache Arrow C++ versions 15.0.0 through 23.0.0 Description A use-after-free issue exists in Apache Arrow C++ when reading an Arrow IPC file with pre-buffering enabled, if the file contains data with variadic buffers like Binary View and Strin...