OSV-2020-42 Heap-buffer-overflow in bool arrow::util::RleDecoder::NextCounts<int>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20695 Crash type: Heap-buffer-overflow WRITE Crash state: bool arrow::util::RleDecoder::NextCounts int arrow::util::RleDecoder::GetBatchWithDictSpaced virtual thunk to parquet::DictDecoderImplparquet::PhysicalType...

PT-2020-22313

Name of the Vulnerable Software and Affected Versions Apache Arrow affected versions not specified Description A heap buffer overflow issue has been identified. The crash occurs in the arrow::util::RleDecoder::NextCounts and arrow::util::RleDecoder::GetBatchWithDictSpaced functions. This issue is...

PT-2020-22374

Name of the Vulnerable Software and Affected Versions Parquet affected versions not specified Description The issue is related to a heap-buffer-overflow read crash in the RleDecoder::GetBatchWithDictSpaced function, specifically when handling double data types. This crash occurs within the...