Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:apache:apr-Util:*:*:*:*:*:*:*:*

2 briefs RSS
low advisory

Heap Buffer Overflow in Apache Portable Runtime Utility Library

CVE-2026-34502 is a heap buffer overflow vulnerability in the Apache Portable Runtime (APR) Utility library's memcached client that could allow remote attackers to cause memory corruption or arbitrary code execution.

Apache Portable Runtime Utility
1c
medium advisory

CVE-2025-49506 Apache Portable Runtime Utility Password Validation Timing Attack

CVE-2025-49506 describes a timing attack vulnerability in the apr_password_validate function of the Apache Portable Runtime Utility library, which uses non-constant time comparisons to verify passwords.

Apache Portable Runtime Utility
1c