Use After Free in Apache Software Foundation Fory

CVE-2026-60080

Use After Free vulnerability in the Rust deserialization logic of Apache Fory. This issue affects Apache Fory from 0.13.0 through 1.3.0. A crafted Fory payload could cause undefined behavior, process crash, or potential memory disclosure…

Vulnerability class: Use-After-Free

Affected products

Weakness classification (CWE)

References