Skip to content
NewA calmer, faster ZeroHour

Critical flaw in Apache Parquet's Java Library allows remote code execution

Security Affairsby @securityaffairs ()2 min read4
Analyze CVE-2025-30065 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2025-30065
RCE via Malicious Avro Schema Parsing in Apache Parquet Java (parquet-avro)
10.044%PoC

From the original article

2 min read at securityaffairs.com

Experts warn of a critical vulnerability impacting Apache Parquet’s Java Library that could allow remote code execution. Apache Parquet’s Java Library is a software library for reading and writing Parquet files in the Java programming language. Parquet is a columnar storage file format that is optimized for use with large-scale data processing frameworks, such as Apache Hadoop, Apache Spark, and Apache Drill.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.