Apache Datasketches (Apache Software Foundation) - vulnerabilities (CVEs)

5 CVEs, 5 in the last 30 days, 1 known versions, newest CVE from 2026-10-22. Vendor: Apache Software Foundation.

CVEs of Apache Datasketches

• CVE-2026-103634 - CVSS 5.3 (medium), 2026-10-22: Out-of-bounds read and write in the Count-Min sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp). count_min_sketch::deserialize() did…
• CVE-2026-103636 - CVSS 7.5 (high), 2026-10-10: Out-of-bounds read in the VarOpt union deserialization of Apache DataSketches C++ (repo: datasketches-cpp). var_opt_union::deserialize() read the 32-byte…
• CVE-2026-103635 - CVSS 9.1 (critical), 2026-10-10: Out-of-bounds read in the compact Theta sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp). compact_theta_sketch::deserialize() and…
• CVE-2026-103513 - CVSS 9.8 (critical), 2026-10-10: Out-of-bounds read and write in the CPC sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp). A crafted serialized CPC sketch passed to…
• CVE-2026-103501 - CVSS 9.8 (critical), 2026-10-10: Heap buffer overflow in the HLL sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp). When deserializing a sketch in LIST mode, from…