{"action":"Upgrade pyarrow to 0.15.0 or later.","affected":[{"fixed":"0.15.0","introduced":"0.12.0"}],"component":"pyarrow","cve_ids":["CVE-2019-12410"],"ecosystem":"PyPI","epss":0.04608,"exploited":false,"fixed_versions":["0.15.0"],"ghsa_id":"GHSA-cjw4-2w9r-r8mv","id":"tcs_01M5KG8X1DP5NH1HMP3TWR4QRA","modified_at":"2023-11-08T04:01:04.600457Z","published_at":"2019-11-08T19:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2019-196","https://lists.apache.org/thread.html/49f067b1c5fb7493d952580f0d2d032819ba351f7a78743c21126269@%3Cdev.arrow.apache.org%3E","http://www.openwall.com/lists/oss-security/2019/11/08/1","https://lists.apache.org/thread.html/efd8bbf57427d3c303b5316d208a335f8d0c0dbe0dc4c87cfa995073@%3Cannounce.apache.org%3E","https://github.com/advisories/GHSA-cjw4-2w9r-r8mv"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2019-196","url":"https://osv.dev/vulnerability/PYSEC-2019-196"}],"summary":"While investigating UBSAN errors in https://github.com/apache/arrow/pull/5365 it was discovered Apache Arrow versions 0.12.0 to 0.14.1, left memory Array data uninitialized when reading RLE null data"}