Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

apache/arrow

              main @ d091957
            

Fixes

CVEs

CRITICAL

Peak severity

36.4%

Coverage

Highlights

Memory Corruption: 5 prior fixes. Scrutinize any change in this area.

.github/workflows: most-fixed (1 issue). Treat as high-risk during review.

8 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Memory Corruption: Gandiva's LLVM expression compiler embedded raw pointer constants directly in compiled code, causing use-after-free or invalid pointer dereferences when reuse occurred from the cache. This bypasses typical C++ lifecycle management.

Buffer Overflow: Integer overflows and negative lengths in Gandiva's core string manipulation stubs allowed attackers to trigger undersized allocations via gdv_fn_context_arena_malloc, causing heap-based buffer overflows.

Use After Free: Duplicate Py_XDECREF calls on error-handling branches when PyList_SetItem failed caused reference-counting issues, yielding critical Use-After-Free conditions in python-to-C++ boundaries.