ParquetSharp: Possible Stack Overflow When Reading a ParquetFile with Large Decimal Type Width

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-42241 · Microsoft / collected KEV context

EUVD-2026-28430

GHSA-rrjr-v56m-ww88

cve-program · CVE-2026-42241

• https://github.com/G-Research/ParquetSharp/security/advisories/GHSA-rrjr-v56m-ww88
• https://github.com/G-Research/ParquetSharp/releases/tag/23.0.0.1

euvd · EUVD-2026-28430

• https://github.com/G-Research/ParquetSharp/security/advisories/GHSA-rrjr-v56m-ww88
• https://github.com/G-Research/ParquetSharp/releases/tag/23.0.0.1

nvd · CVE-2026-42241

• https://github.com/G-Research/ParquetSharp/releases/tag/23.0.0.1
• https://github.com/G-Research/ParquetSharp/security/advisories/GHSA-rrjr-v56m-ww88

osv · GHSA-rrjr-v56m-ww88

• https://github.com/G-Research/ParquetSharp/security/advisories/GHSA-rrjr-v56m-ww88
• https://nvd.nist.gov/vuln/detail/CVE-2026-42241
• https://github.com/G-Research/ParquetSharp
• https://github.com/G-Research/ParquetSharp/releases/tag/23.0.0.1

No related operational record is retained in the current change model.