CVE-2026-103635

Summary

An out-of-bounds read vulnerability in Apache DataSketches C++ allows attackers to read memory beyond the intended sketch boundaries during deserialization, potentially leading to crashes or information disclosure. This affects applications that deserialize Theta sketches from untrusted sources.

Exploitability

Exploitation is moderately difficult as it requires crafting a malicious sketch file that triggers a 32-bit overflow and over-read conditions, but can be achieved with knowledge of the data format and sufficient control over input data.

Blast radius

The impact is significant for applications processing untrusted sketch data, potentially causing denial of service or exposing sensitive memory contents to attackers who can provide crafted sketches.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 5.3.0 which fixes this out-of-bounds read vulnerability in compact_theta_sketch::deserialize() and wrapped_compact_theta_sketch::wrap().

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.