Security Advisory

CVE-2026-60080

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-21 10:54:19

Last updated 2026-07-22 16:12:10

Assigner apache

CVSS score not scored

State PUBLISHED

Description

Use After Free vulnerability in the Rust deserialization logic of Apache Fory. This issue affects Apache Fory from 0.13.0 through 1.3.0. A crafted Fory payload could cause undefined behavior, process crash, or potential memory disclosure. Users are recommended to upgrade to version 1.4.0, which fixes the issue.

← Browse all CVEs View on cve.org ↗