QwikSec

Security Database

CVE

CWE

Training

CVE-2022-36125

Published: Aug 9, 2022

Modified: Mar 6, 2026

PUBLISHED

Description

It is possible to crash (panic) an application by providing a corrupted data to be read. This issue affects Rust applications using Apache Avro Rust SDK prior to 0.14.0 (previously known as avro-rs). Users should update to apache-avro version 0.14.0 which addresses this issue.

Vendor	Product	Versions
Apache Software Foundation	Apache Avro	affected `unspecified - < 0.14.0`

Weaknesses (CWE)

References

https://lists.apache.org/thread/t1r5xz0pvhm4tosqopjpj6dz8zlsht07

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.