CVE-2026-111959

Name of the Vulnerable Software and Affected Versions Apache Arrow Rust versions 33.0.0 through 60.0.0

Description Improper validation of RunEndEncoded arrays in the ArrayData interface allows reading data beyond the bounds of the child values array. This occurs during the validation of RunEndEncoded arrays via the ArrayData::validate values function, which can lead to an out-of-bounds read when accessing the last value through APIs such as TypedRunArray::value.

Recommendations Update Apache Arrow Rust version 60.0.0 to 60.1.0 Update Apache Arrow Rust version 59.3.1 to 59.3.2 Update Apache Arrow Rust version 58.4.0 to 58.4.1 Update Apache Arrow Rust version 57.3.1 to 57.3.2 Update Apache Arrow Rust versions 33.0.0 through 57.3.0 to 57.3.2