CVE-2026-71560

CVE-2026-71560: Apache Fory (C++) deserialization issue . Affected: Apache Fory C++ 0.14.0 up to before 1.5.0 when deserializing structs containing tagged integer fields. Root cause: out-of-bounds heap read in the tagged integer fast-path deserializer. Impact: potential information disclosure or ...