CVE-2023-39410

When deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system. This issue affects Java applications using Apache Avro Java SDK up to and including 1.11.2. Users should update to apache-avro version 1.11.3 which addresses this issue.

• CWE-502
• CWE-502

• https://lists.apache.org/thread/q142wj99cwdd0jo5lvdoxzoymlqyjddsMailing List, Vendor Advisory
• https://security.netapp.com/advisory/ntap-20240621-0006/
• https://www.openwall.com/lists/oss-security/2023/09/29/6Mailing List, Third Party Advisory
• https://lists.apache.org/thread/q142wj99cwdd0jo5lvdoxzoymlqyjddsMailing List, Vendor Advisory
• https://security.netapp.com/advisory/ntap-20240621-0006/
• https://www.openwall.com/lists/oss-security/2023/09/29/6Mailing List, Third Party Advisory

Published

Sep 29, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-39405Vulnerability of out-of-bounds parameter read/write in the W…9.8
• CVE-2023-39406Permission control vulnerability in the XLayout component. S…7.5
• CVE-2023-39407The Watchkit has a risk of unauthorized file access.Successf…9.1
• CVE-2023-39408DoS vulnerability in the PMS module. Successful exploitation…7.5
• CVE-2023-39409DoS vulnerability in the PMS module. Successful exploitation…7.5
• CVE-2023-3941Relative Path Traversal vulnerability in ZkTeco-based OEM de…10
• CVE-2023-39411Improper input validationation for some Intel Unison softwar…4.4
• CVE-2023-39412Cross-site request forgery in some Intel Unison software may…8.8
• CVE-2023-39413Multiple integer underflow vulnerabilities exist in the LXT2…7.8
• CVE-2023-39414Multiple integer underflow vulnerabilities exist in the LXT2…7.3
• CVE-2023-39415Improper authentication vulnerability in Proself Enterprise/…7.5
• CVE-2023-39416Proself Enterprise/Standard Edition Ver5.61 and earlier, Pro…7.2