CVE-2025-30065 in Parquet Java

Riassunto

di MITRE • 01/04/2025

Schema parsing in the parquet-avro module of Apache Parquet 1.15.0 and previous versions allows bad actors to execute arbitrary code


Users are recommended to upgrade to version 1.15.1, which fixes the issue.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Prenotare: 15/03/2025
• Divulgazione: 01/04/2025
• Moderazione: accettato
• Voce: VDB-302598
• CPE: pronto
• CWE: CWE-502 (confermato)
• CVSS: 9.8 (NVD)
• EPSS: 0.43300
• KEV: no
• Attività: molto basso
• Settore: Insurance, Pharma, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-30065
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-30065
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-30065/