CVE-2026-42241

ParquetSharp is a .NET library for reading and writing Apache Parquet files. From version 18.1.0 to before version 23.0.0.1, DecimalConverter.ReadDecimal makes a stackalloc using what might be an attacker-supplied value. If an attacker declares a decimal column with some unreasonable width, this could lead to a stack overflow. In a service environment, this would potentially take down a service. This affects applications using ParquetSharp to read untrusted Parquet files in a network service. This issue has been patched in version 23.0.0.1.

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://github.com/G-Research/ParquetSharp/releases/tag/23.0.0.1
https://github.com/G-Research/ParquetSharp/security/advisories/GHSA-rrjr-v56m-ww88

Configurations

No configuration.

History

26 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) ParquetSharp es una biblioteca .NET para leer y escribir archivos Apache Parquet. Desde la versión 18.1.0 hasta antes de la versión 23.0.0.1, DecimalConverter.ReadDecimal realiza un stackalloc utilizando lo que podría ser un valor proporcionado por un atacante. Si un atacante declara una columna decimal con un ancho irrazonable, esto podría llevar a un desbordamiento de pila. En un entorno de servicio, esto podría potencialmente derribar un servicio. Esto afecta a las aplicaciones que utilizan ParquetSharp para leer archivos Parquet no confiables en un servicio de red. Este problema ha sido parcheado en la versión 23.0.0.1.

Information

Published : 2026-05-07 20:16

Updated : 2026-10-26 20:10

NVD link : CVE-2026-42241

Mitre link : CVE-2026-42241

CVE.ORG link : CVE-2026-42241

JSON object : View

Products Affected

No product.

CWE

CWE-789

Memory Allocation with Excessive Size Value

{"id": "CVE-2026-42241", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-42241", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-08T14:38:23.750570Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "G-Research", "product": "ParquetSharp", "versions": [{"status": "affected", "version": ">= 18.1.0, < 23.0.0.1"}]}]}], "published": "2026-05-07T20:16:44.247", "references": [{"url": "https://github.com/G-Research/ParquetSharp/releases/tag/23.0.0.1", "source": "security-advisories@github.com"}, {"url": "https://github.com/G-Research/ParquetSharp/security/advisories/GHSA-rrjr-v56m-ww88", "source": "security-advisories@github.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-789"}]}], "descriptions": [{"lang": "en", "value": "ParquetSharp is a .NET library for reading and writing Apache Parquet files. From version 18.1.0 to before version 23.0.0.1, DecimalConverter.ReadDecimal makes a stackalloc using what might be an attacker-supplied value. If an attacker declares a decimal column with some unreasonable width, this could lead to a stack overflow. In a service environment, this would potentially take down a service. This affects applications using ParquetSharp to read untrusted Parquet files in a network service. This issue has been patched in version 23.0.0.1."}, {"lang": "es", "value": "ParquetSharp es una biblioteca .NET para leer y escribir archivos Apache Parquet. Desde la versi\u00f3n 18.1.0 hasta antes de la versi\u00f3n 23.0.0.1, DecimalConverter.ReadDecimal realiza un stackalloc utilizando lo que podr\u00eda ser un valor proporcionado por un atacante. Si un atacante declara una columna decimal con un ancho irrazonable, esto podr\u00eda llevar a un desbordamiento de pila. En un entorno de servicio, esto podr\u00eda potencialmente derribar un servicio. Esto afecta a las aplicaciones que utilizan ParquetSharp para leer archivos Parquet no confiables en un servicio de red. Este problema ha sido parcheado en la versi\u00f3n 23.0.0.1."}], "lastModified": "2026-10-26T20:10:00.160", "sourceIdentifier": "security-advisories@github.com"}