Orc (Apache) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 130 known versions, newest CVE from 2025-05-14. Vendor: Apache.

CVEs of Orc

• CVE-2025-47436 - CVSS 9.8 (critical), 2025-05-14: Heap-based Buffer Overflow vulnerability in Apache ORC. A vulnerability has been identified in the ORC C++ LZO decompression logic, where specially crafted…
• CVE-2018-8015 - CVSS 7.5 (high), 2018-05-18: In Apache ORC 1.0.0 to 1.4.3 a malformed ORC file can trigger an endlessly recursive function call in the C++ or Java parser. The impact of this bug is most…