ROOT-APP-PYPI-CVE-2026-25087 CVE-2026-25087 in rootio-pyarrow - Patched by Root

Root has patched CVE-2026-25087 in the rootio-pyarrow package for Root:PyPI. Multiple fixed versions available...

CVE-2026-25087

A use after free flaw was found in Apache Arrow C++. This Use After Free vulnerability can be triggered when an application reads a specially crafted Arrow IPC Inter-Process Communication file with pre-buffering enabled, leading to memory corruption or application crashes. This could plausibly...