CVE-2026-71558

The CVE-2026-71558 entry describes a heap type confusion in Apache Fory C++ deserialization triggered by crafted input during polymorphic smart-pointer deserialization. Affected versions are 0.14.0 up to