Mmastodon TechnologyCybersecurity first seen 2 h ago, last 2 h ago, peak #5

Apache patches three deserialization flaws in DataSketches C++

Original: CVE-2026-103501: Apache released DataSketches C++ 5.3.0, fixing three deserialization flaws in datasketches-cpp affectin

Apache has released DataSketches C++ 5.3.0, fixing three deserialization vulnerabilities in the datasketches-cpp library that affect all versions up to 5.2.0. Two flaws, tracked as CVE-2026-103501 and CVE-2026-103513, can cause heap corruption, while CVE-2026-103635 allows an out-of-bounds read. All three can be triggered by crafted sketch data, so users are urged to upgrade.

Why now: Security teams are flagging the new release because deserialization bugs in a widely used sketching library could enable memory corruption attacks.

ApacheDataSketchesdatasketches-cppCVE-2026-103501

Open on mastodon →

Rank over time, top of the chart is #1. 2 snapshots from 2 h ago to 2 h ago.

Evidence

• CVE-2026-103501: Apache released DataSketches C++ 5.3.0, fixing three deserialization flaws in datasketches-cpp affecting versions up to 5.2.0. CVE-2026-103501 and CVE-2026-103513 allow heap corruption; CVE-2026-103635 allows an out-of-bounds read. Crafted sketches from… · suriq@infosec.exchange · 2

API: https://socialmediatrends-api.osmike.com/v1/trends/1727570