{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/datasketches-c++/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"id":"CVE-2026-123338"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["DataSketches C++"],"_cs_severities":["medium"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Apache"],"content_html":"\u003cp\u003eApache DataSketches C++ contains an out-of-bounds write vulnerability that can be triggered during the deserialization of a REQ sketch from an untrusted source. This occurs because the library fails to properly validate serialized compactor headers, resulting in potential heap memory corruption.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eAn attacker providing a crafted sketch can cause heap memory corruption when the application deserializes the data.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eUsers are advised to monitor the Apache DataSketches C++ project for updates addressing this issue.\u003c/p\u003e\n","date_modified":"2026-11-13T04:57:13Z","date_published":"2026-11-13T04:57:13Z","id":"https://feed.craftedsignal.io/briefs/2026-11-apache-datasketches-cpp-oob-write-cve-2026-123338/","summary":"Apache DataSketches C++ is vulnerable to an out-of-bounds write during the deserialization of REQ sketches due to insufficient validation of serialized compactor headers, which can lead to heap memory corruption.","title":"Apache DataSketches C++: Out-of-bounds write in REQ sketch deserialization","url":"https://feed.craftedsignal.io/briefs/2026-11-apache-datasketches-cpp-oob-write-cve-2026-123338/"}],"language":"en","title":"CraftedSignal Threat Feed - DataSketches C++","version":"https://jsonfeed.org/version/1.1"}