Out-of-bounds Read

Apache Fory is vulnerable to Out-of-Bounds Read. The vulnerability is due to improper bounds checking in readAlignedVarUint when using sun.misc.Unsafe during out-of-band zero-copy deserialization, which allows an attacker to trigger reads beyond the underlying buffer boundaries using crafted...