CVE-2026-34502 PUBLISHED

Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client

Assigner: apache
Reserved: 30.03.2026 Published: 06.08.2026 Updated: 06.08.2026

Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client

This issue affects Apache Portable Runtime Utility: from 1.3.0 through 1.6.3.

Product Status

Vendor Apache Software Foundation
Product Apache Portable Runtime Utility
Versions Default: unaffected
  • affected from 1.3.0 to 1.6.3 (incl.)

Credits

  • Elhanan Haenel finder

References

Problem Types

  • CWE-122 Heap-based Buffer Overflow CWE