Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8g3p-5q43-955w

Опубликовано: 21 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 7.3

Описание

Use After Free vulnerability in the Rust deserialization logic of Apache Fory. This issue affects Apache Fory from 0.13.0 through 1.3.0.

A crafted Fory payload could cause undefined behavior, process crash, or potential memory disclosure.

Users are recommended to upgrade to version 1.4.0, which fixes the issue.

Use After Free vulnerability in the Rust deserialization logic of Apache Fory. This issue affects Apache Fory from 0.13.0 through 1.3.0.

A crafted Fory payload could cause undefined behavior, process crash, or potential memory disclosure.

Users are recommended to upgrade to version 1.4.0, which fixes the issue.

EPSS

Процентиль: 36%
0.00424
Низкий

7.3 High

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 7.3
nvd
около 1 месяца назад

Use After Free vulnerability in the Rust deserialization logic of Apache Fory. This issue affects Apache Fory from 0.13.0 through 1.3.0. A crafted Fory payload could cause undefined behavior, process crash, or potential memory disclosure. Users are recommended to upgrade to version 1.4.0, which fixes the issue.

EPSS

Процентиль: 36%
0.00424
Низкий

7.3 High

CVSS3

Дефекты

CWE-416