DataSketches C++ - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/datasketches-c++/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioFri, 13 Nov 2026 04:57:13 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgApache DataSketches C++: Out-of-bounds write in REQ sketch deserializationhttps://feed.craftedsignal.io/briefs/2026-11-apache-datasketches-cpp-oob-write-cve-2026-123338/Fri, 13 Nov 2026 04:57:13 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-apache-datasketches-cpp-oob-write-cve-2026-123338/Apache DataSketches C++ is vulnerable to an out-of-bounds write during the deserialization of REQ sketches due to insufficient validation of serialized compactor headers, which can lead to heap memory corruption.Apache DataSketches C++ contains an out-of-bounds write vulnerability that can be triggered during the deserialization of a REQ sketch from an untrusted source. This occurs because the library fails to properly validate serialized compactor headers, resulting in potential heap memory corruption.

Impact

An attacker providing a crafted sketch can cause heap memory corruption when the application deserializes the data.

Recommendation

Users are advised to monitor the Apache DataSketches C++ project for updates addressing this issue.

]]>mediumadvisory