CVE-2026-71560

CVE-2026-71560 describes an out-of-bounds heap read in the C++ deserializer of Apache Fory when deserializing structs containing tagged integer fields. Affected: Apache Fory C++ versions 0.14.0 up to, but not including, 1.5.0. Impact: potential information disclosure or denial of service via a cr...