PT-2025-24602 · Crates.Io · Arrow2

Published 2025-05-30 · Updated 2025-05-30

OSV

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Rows::row unchecked() allows out of bounds access to the underlying buffer without sufficient checks.

The arrow2 crate is no longer maintained, so there are no plans to fix this issue. Users are advised to migrate to the arrow crate, instead.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

GHSA-WV8J-M3HX-924J

Affected Products

Arrow2

References · 3

• https://osv.dev/vulnerability/GHSA-wv8j-m3hx-924j · Vendor Advisory
• https://github.com/jorgecarleitao/arrow2 · Note
• https://rustsec.org/advisories/RUSTSEC-2025-0038.html · Note