https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-04T01:16:47.420960+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2019-12410 CVE-2019-12410 2026-10-04T01:16:47.423249+00:00

Affected: Apache Software Foundation Apache Arrow

While investigating UBSAN errors in https://github.com/apache/arrow/pull/5365 it was discovered Apache Arrow versions 0.12.0 to 0.14.1, left memory Array data uninitialized when reading RLE null data from parquet. This affected the C++, Python, Ruby and R implementations. The uninitialized memory could potentially be shared if are transmitted over the wire (for instance with Flight) or persisted in the streaming IPC and file formats.

 https://db.gcve.eu/vuln/ghsa-cjw4-2w9r-r8mv GHSA-cjw4-2w9r-r8mv — Missing Initialization of Resource in Apache Arrow 2026-10-04T01:16:47.423325+00:00

Affected: PyPI: pyarrow, RubyGems: red-arrow

While investigating UBSAN errors in https://github.com/apache/arrow/pull/5365 it was discovered Apache Arrow versions 0.12.0 to 0.14.1, left memory Array data uninitialized when reading RLE null data from parquet. This affected the C++, Python, Ruby and R implementations. The uninitialized memory could potentially be shared if are transmitted over the wire (for instance with Flight) or persisted in the streaming IPC and file formats.

 https://db.gcve.eu/vuln/pysec-2019-196 PYSEC-2019-196 2026-10-04T01:16:47.423370+00:00

Affected: PyPI: pyarrow

While investigating UBSAN errors in https://github.com/apache/arrow/pull/5365 it was discovered Apache Arrow versions 0.12.0 to 0.14.1, left memory Array data uninitialized when reading RLE null data from parquet. This affected the C++, Python, Ruby and R implementations. The uninitialized memory could potentially be shared if are transmitted over the wire (for instance with Flight) or persisted in the streaming IPC and file formats.