{
  "from_raw": "Chaokun Yang <chaokunyang@apache.org>",
  "from": "Chaokun Yang <ch...@apache.org>",
  "gravatar": "5dac1def761b1a642c93c34593f74545",
  "to": "an...@apache.org,\n de...@fory.apache.org",
  "subject": "CVE-2026-71560: Apache Fory: Out-of-bounds heap read in C++ struct deserializer tagged-int fast-path",
  "message-id": "<bceaab86-514f-2623-45cd-31ed6f227d5d@apache.org>",
  "mid": "snt4mlg72ggpq7vdznp4871nwrk46pdj",
  "permalinks": [
    "snt4mlg72ggpq7vdznp4871nwrk46pdj",
    "r2bcdac2ab0b58adcff173afda7cc727ace156cc924161008e5867db4@<announce.apache.org>"
  ],
  "dbid": "a0cb91588380b42fe0160818513e5760ad35fd81442dd29608514a90ef4be912",
  "cc": "de...@fory.apache.org",
  "epoch": 1786087813,
  "list": "<announce.apache.org>",
  "list_raw": "<announce.apache.org>",
  "date": "2026/08/07 07:30:13",
  "private": false,
  "references": "",
  "in-reply-to": "",
  "body": "Severity: moderate \n\nAffected versions:\n\n- Apache Fory 0.14.0 before 1.5.0\n\nDescription:\n\nOut-of-bounds Read vulnerability in Apache Fory C++ deserialization.\n\nThis issue affects Apache Fory C++ versions from 0.14.0 before 1.5.0 when deserializing structs containing tagged integer fields. A crafted input payload may trigger an out-of-bounds heap read in the tagged integer fast-path deserializer, potentially causing information disclosure or denial of service.\n\n\nUsers are recommended to upgrade to Apache Fory 1.5.0, which fixes this issue. Applications that do not use Apache Fory C++ or do not use tagged integer fields are not affected.\n\nCredit:\n\nZhixi \"Jace Sun\", independent security researcher (reporter)\n\nReferences:\n\nhttps://fory.apache.org\nhttps://www.cve.org/CVERecord?id=CVE-2026-71560\n\n",
  "body_short": "Severity: moderate \n\nAffected versions:\n\n- Apache Fory 0.14.0 before 1.5.0\n\nDescription:\n\nOut-of-bounds Read vulnerability in Apache Fory C++ deserialization.\n\nThis issue affects Apache Fory C++ versio",
  "html_source_only": false,
  "attachments": [],
  "forum": "announce@apache.org",
  "size": 3438,
  "id": "snt4mlg72ggpq7vdznp4871nwrk46pdj"
}