Out-of-bounds Read and Write in Apache DataSketches C++

CVE-2026-103634

What is CVE-2026-103634?

The vulnerability involves an out-of-bounds read and write issue in the Count-Min sketch deserialization process of Apache DataSketches C++. The deserialize() function fails to check the preamble in its input size check, allowing a potential read of up to 16 bytes beyond the input's end in cases of truncated sketches. Furthermore, the computation of table size from serialized bucket counts and hash functions in 32-bit arithmetic may wrap to zero, resulting in deserialized sketches with empty tables. This condition could lead to unsafe heap memory access, potentially causing crashes and opening the door to further exploitation. Users are strongly advised to upgrade to version 5.3.0 to rectify this vulnerability.

References