AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2019-12410

HIGH · CVSS 7.5 EPSS 4.61%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-11-08 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2019-12410
Severity
HIGH
CVSS
7.5
EPSS
4.61%
Apache GitHub

Original NVD Description

While investigating UBSAN errors in https://github.com/apache/arrow/pull/5365 it was discovered Apache Arrow versions 0.12.0 to 0.14.1, left memory Array data uninitialized when reading RLE null data from parquet. This affected the C++, Python, Ruby and R implementations. The uninitialized memory could potentially be shared if are transmitted over the wire (for instance with Flight) or persisted in the streaming IPC and file formats.