VulnerableCode Package Details - pkg:pypi/pyarrow@0.13.0

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:pypi/pyarrow@0.13.0

Essentials
History (1)

purl	pkg:pypi/pyarrow@0.13.0

Next non-vulnerable version	23.0.1
Latest non-vulnerable version	23.0.1
Risk	4.0

Vulnerabilities affecting this package (1)

Vulnerability	Summary	Fixed by
VCID-7wzb-dv7h-jkdm Aliases: CVE-2019-12410 GHSA-cjw4-2w9r-r8mv PYSEC-2019-196	While investigating UBSAN errors in https://github.com/apache/arrow/pull/5365 it was discovered Apache Arrow versions 0.12.0 to 0.14.1, left memory Array data uninitialized when reading RLE null data from parquet. This affected the C++, Python, Ruby and R implementations. The uninitialized memory could potentially be shared if are transmitted over the wire (for instance with Flight) or persisted in the streaming IPC and file formats.	0.15.0 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 0.15.1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}

Vulnerability

Summary

Fixed by

VCID-7wzb-dv7h-jkdm
Aliases:
CVE-2019-12410
GHSA-cjw4-2w9r-r8mv
PYSEC-2019-196

While investigating UBSAN errors in https://github.com/apache/arrow/pull/5365 it was discovered Apache Arrow versions 0.12.0 to 0.14.1, left memory Array data uninitialized when reading RLE null data from parquet. This affected the C++, Python, Ruby and R implementations. The uninitialized memory could potentially be shared if are transmitted over the wire (for instance with Flight) or persisted in the streaming IPC and file formats.

0.15.0
Affected by 1 other vulnerability.

0.15.1
Affected by 1 other vulnerability.

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-06-02T04:05:56.777742+00:00	Pypa Importer	Affected by	VCID-7wzb-dv7h-jkdm	https://github.com/pypa/advisory-database/blob/main/vulns/pyarrow/PYSEC-2019-196.yaml	38.6.0