title: Integer overflow when reading corrupted .avro file in Avro Rust SDK
description: It is possible to crash (panic) an application by providing a corrupted data to be read. This issue affects Rust applications using Apache Avro Rust SDK prior to 0.14.0 (previously known as avro-rs). Users should update to apache-avro version 0.14.0 which addresses this issue.
problem types: CWE-20 Improper Input Validation
affected:
{
platforms: Rust
product: Apache Avro
vendor: Apache Software Foundation
versions:
lessThan: 0.14.0, status: affected, version: unspecified, versionType: custom
}
metrics:
other: [
content: {'other': 'important'}
type: unknown
]