As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-103636: Apache DataSketches: datasketches-cpp: Out-of-bounds read in VarOpt union deserialization allows denial of service via a truncated sketch
Apache DataSketches C++ versions 2.0.0-incubating through 5.2.0 contain an out-of-bounds read vulnerability in VarOpt union deserialization that occurs when processing a truncated serialized union. The flaw allows an attacker to read up to 24 bytes past the end of an input buffer, potentially triggering a denial of service.
Why it matters: Developers and operators using Apache DataSketches C++ for sketch-based data processing should upgrade to a patched version to prevent denial of service attacks via malformed serialized unions.
- Source published
- First seen by Cybersecurity Tracker