Use After Free in Apache Software Foundation Fory
CVE-2026-60080
Use After Free vulnerability in the Rust deserialization logic of Apache Fory. This issue affects Apache Fory from 0.13.0 through 1.3.0. A crafted Fory payload could cause undefined behavior, process crash, or potential memory disclosure…
Vulnerability class: Use-After-Free
Affected products
- Apache Software Foundation Fory — versions 0.13.0
Weakness classification (CWE)
References
- security@apache.org (vendor-advisory)