Severity
High
Analysis Summary
CVE-2025-46762
Apache Parquet could allow a remote attacker to execute arbitrary code on the system, caused by a flaw when reading an Avro schema from a Parquet file metadata.
Impact
- Code Execution
Indicators of Compromise
CVE
CVE-2025-46762
Affected Vendors
Apache
Affected Products
- Apache Parquet - 1.15.0 - 1.15.1
Remediation
Upgrade to the latest version of Apache Parquet, available from the Apache Security Advisory.