CVE-2026-111959

The Apache Arrow Rust (arrow crate) contains an out-of-bounds read vulnerability affecting versions 33.0.0 through 57.3.1 , 58.4.0 , 59.3.1 , and 60.0.0 . The root cause is improper validation of RunEndEncoded arrays within the ArrayData interface, which can lead to reading data beyond the bounds...