CVE-2026-103634

The Apache DataSketches C++ library (repo: datasketches-cpp) is vulnerable to an out-of-bounds read and write during the deserialization of a Count-Min sketch . The root cause is that the count_min_sketch::deserialize() function fails to include the preamble in its input size check, allowing a tr...

CVE-2026-103634 Apache DataSketches: datasketches-cpp: Out-of-bounds read and write in Count-Min sketch deserialization allows memory corruption via a crafted sketch

Out-of-bounds read and write in the Count-Min sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. countminsketch::deserialize did not include the preamble in its input size check, so a truncated sketch could cause a read of up to 16 bytes past the end of the input. In...