CVE-2025-47436

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-47436

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

H

eap-based Buffer Overflow vulnerability in Apache ORC. A vulnerability has been identified in the ORC C++ LZO decompression logic, where specially crafted malformed ORC files can cause the decompressor to allocate a 250-byte buffer but then attempts to copy 295 bytes into it. It causes memory corruption. This issue affects Apache ORC C++ library: through 1.8.8, from 1.9.0 through 1.9.5, from 2.0.0 through 2.0.4, from 2.1.0 through 2.1.1. Users are recommended to upgrade to version 1.8.9, 1.9.6, 2.0.5, and 2.1.2, which fix the issue.

References
Link Resource
https://lists.apache.org/thread/kd6tlv8fs5jybmsgxr4vrkdxyc866wrn Mailing List Vendor Advisory
https://orc.apache.org/security/CVE-2025-47436/ Third Party Advisory
http://www.openwall.com/lists/oss-security/2025/05/13/4 Mailing List Third Party Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:apache:orc:*:*:*:*:*:*:*:*
cpe:2.3:a:apache:orc:*:*:*:*:*:*:*:*
cpe:2.3:a:apache:orc:*:*:*:*:*:*:*:*
cpe:2.3:a:apache:orc:*:*:*:*:*:*:*:*
History

14 Jul 2025, 14:55

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.8
References () https://lists.apache.org/thread/kd6tlv8fs5jybmsgxr4vrkdxyc866wrn - () https://lists.apache.org/thread/kd6tlv8fs5jybmsgxr4vrkdxyc866wrn - Mailing List, Vendor Advisory
References () https://orc.apache.org/security/CVE-2025-47436/ - () https://orc.apache.org/security/CVE-2025-47436/ - Third Party Advisory
References () http://www.openwall.com/lists/oss-security/2025/05/13/4 - () http://www.openwall.com/lists/oss-security/2025/05/13/4 - Mailing List, Third Party Advisory
CPE cpe:2.3:a:apache:orc:*:*:*:*:*:*:*:*
First Time Apache
Apache orc

16 May 2025, 14:43

Type Values Removed Values Added
Summary
  • (es) Vulnerabilidad de desbordamiento de búfer basado en montón en Apache ORC. Se ha identificado una vulnerabilidad en la lógica de descompresión LZO de ORC C++. Archivos ORC malformados, especialmente manipulados, pueden provocar que el descompresor asigne un búfer de 250 bytes, pero luego intente copiar 295 bytes en él. Esto causa corrupción de memoria. Este problema afecta a la librería Apache ORC C++: hasta la versión 1.8.8, de la 1.9.0 a la 1.9.5, de la 2.0.0 a la 2.0.4 y de la 2.1.0 a la 2.1.1. Se recomienda a los usuarios actualizar a las versiones 1.8.9, 1.9.6, 2.0.5 y 2.1.2, que solucionan el problema.

14 May 2025, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-05-14 14:15

Updated : 2025-07-14 14:55

NVD link : CVE-2025-47436

Mitre link : CVE-2025-47436

CVE.ORG link : CVE-2025-47436

JSON object : View

Products Affected

apache

CWE
CWE-122

Heap-based Buffer Overflow