漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
While investigating UBSAN errors in https://github.com/apache/arrow/pull/5365 it was discovered Apache Arrow versions 0.12.0 to 0.14.1, left memory Array data uninitialized when reading RLE null data from parquet. This affected the C++, Python, Ruby and R implementations. The uninitialized memory could potentially be shared if are transmitted over the wire (for instance with Flight) or persisted in the streaming IPC and file formats.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache Arrow 代码问题漏洞
Vulnerability Description
Apache Arrow是美国阿帕奇(Apache)软件基金会的一款用于内存数据处理的跨语言开发平台。该平台支持C、C++、C#、Go和Java等编程语言,并提供进程间通信等功能。 Apache Arrow 0.12.0版本至0.14.1版本中存在安全漏洞。攻击者可利用该漏洞获取未初始化的内存。
CVSS Information
N/A
Vulnerability Type
N/A