Threats tagged 'ghsa-rrjr-v56m-ww88'

ParquetSharp contains a vulnerability in its DecimalConverter.ReadDecimal function where a stack allocation uses a potentially attacker-controlled value for decimal width. This can lead to a stack overflow if an attacker crafts a Parquet file with an unreasonably large decimal column width. The issue affects applications using ParquetSharp versions from 18.1.0 up to but not including 23.0.0.1 when reading untrusted Parquet files, potentially causing service crashes.