Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/arrow@0.12.1
purl pkg:pypi/arrow@0.12.1
Next non-vulnerable version 0.15.1
Latest non-vulnerable version 0.15.1
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-n25g-xj5f-tyfj
Aliases:
CVE-2019-12410
GHSA-cjw4-2w9r-r8mv
PYSEC-2019-196
While investigating UBSAN errors in https://github.com/apache/arrow/pull/5365 it was discovered Apache Arrow versions 0.12.0 to 0.14.1, left memory Array data uninitialized when reading RLE null data from parquet. This affected the C++, Python, Ruby and R implementations. The uninitialized memory could potentially be shared if are transmitted over the wire (for instance with Flight) or persisted in the streaming IPC and file formats.
0.15.1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-12T18:19:40.633278+00:00 GitLab Importer Affected by VCID-n25g-xj5f-tyfj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/arrow/CVE-2019-12410.yml 38.6.0