UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-123338
Out-of-bounds Write vulnerability in Apache DataSketches C++. An application that deserializes a REQ sketch from an untrusted source can have heap memory corrupted by a crafted sketch, because the serialized compactor headers were not validated. This issue affects Apache DataSketches C++: from 3.0.0 through 5.3.0. Users are recommended to upgrade to version 5.3.1, which fixes the issue.
Properties
- Last source
- NVD
- Nvd fetched at
- 2026-11-14T00:40:25.638091+00:00
- Cve id
- CVE-2026-123338
- First seen by Signal
- 2026-11-13T17:31:47+00:00
- Retrieved at
- 2026-11-14T00:50:05+00:00
- Published at
- 2026-11-13T11:17:16.273
- Last modified
- 2026-11-13T11:17:16.273
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph