CVE-2026-71558

A heap type confusion vulnerability exists in Apache Fory C++ versions 0.14.0 before 1.5.0 . The root cause is a failure to properly validate type compatibility during polymorphic smart-pointer deserialization , which allows a crafted input payload to force the system to treat an incompatible obj...