Apache Software Foundation Apache DataSketches

• CVE-2026-103634 Medium 5.3 Apache DataSketches: datasketches-cpp: Out-of-bounds read and write in Count-Min sketch deserialization allows memory corruption via a crafted sketch 0.5%
• CVE-2026-103636 High 7.5 Apache DataSketches: datasketches-cpp: Out-of-bounds read in VarOpt union deserialization allows denial of service via a truncated sketch 0.4%
• CVE-2026-103635 Critical 9.1 Apache DataSketches: datasketches-cpp: Out-of-bounds read in compact Theta sketch deserialization allows denial of service via a crafted sketch 0.4%
• CVE-2026-103513 Critical 9.8 Apache DataSketches: datasketches-cpp: Out-of-bounds read and write in the CPC sketch deserialization allows memory corruption via a crafted sketch 0.4%
• CVE-2026-103501 Critical 9.8 Apache DataSketches: datasketches-cpp: HLL CouponList Deserialization Buffer Overflow allows memory corruption via a crafted sketch 0.6%