As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-103501: Apache DataSketches: datasketches-cpp: HLL CouponList Deserialization Buffer Overflow allows memory corruption via a crafted sketch
CVE-2026-103501 is a heap buffer overflow in Apache DataSketches C++ that occurs during deserialization of HLL sketches in LIST mode. The vulnerability allows an attacker to copy more coupon entries than a fixed 8-entry buffer can hold, enabling memory corruption through a crafted sketch. Affected versions span from 1.0.0-incubating through 5.2.0.
Why it matters: Organizations using Apache DataSketches C++ 1.0.0-incubating through 5.2.0 for data sketching operations face potential memory corruption and remote code execution risk if processing untrusted sketch inputs; patching or input validation is required.
- Source published
- First seen by Cybersecurity Tracker