It is possible to crash (panic) an application by providing a corrupted data to be read. This issue affects Rust applications using Apache Avro Rust SDK prior to 0.14.0 (previously known as avro-rs). Users should update to apache-avro version 0.14.0 which addresses this issue.
References:GSA_kwCzR0hTQS0zdzVnLTk4OXAtMzVyOM4AAt5a
Apache Avro Rust SDK corrupted data read can cause crash
| Affected Packages | Affected Versions | Fixed Versions | |
|---|---|---|---|
| cargo:apache-avro | < 0.14.0 | 0.14.0 | |
Affected Version RangesAll affected versions0.0.1 All unaffected versions0.14.0, 0.15.0, 0.16.0, 0.17.0, 0.18.0, 0.19.0 |
|||