CVE-2026-71560

Out-of-bounds Read vulnerability in Apache Fory C++ deserialization. This issue affects Apache Fory C++ versions from 0.14.0 before 1.5.0 when deserializing structs containing tagged integer fields. A crafted input payload may trigger an out-of-bounds heap read in the tagged integer fast-path...

EUVD-2026-54421

Out-of-bounds Read vulnerability in Apache Fory C++ deserialization. This issue affects Apache Fory C++ versions from 0.14.0 before 1.5.0 when deserializing structs containing tagged integer fields. A crafted input payload may trigger an out-of-bounds heap read in the tagged integer fast-path...

CVE-2026-71560

CVE-2026-71560: Apache Fory (C++) deserialization issue . Affected: Apache Fory C++ 0.14.0 up to before 1.5.0 when deserializing structs containing tagged integer fields. Root cause: out-of-bounds heap read in the tagged integer fast-path deserializer. Impact: potential information disclosure or ...