Not scored
CVE-2025-27821
HDFS native client: Out of bounds write in URI parser of native HDFS client
Apache Software FoundationHDFS native client
Status
- Not in CISA KEV
- Fixed in version 3.4.2
Exploit probabilityEPSSchecked 25 Oct
0.9%probability of exploitation in the next 30 days
Higher than 60% of scored CVEs
SeverityCVSS
–Not scored yet
Description NVD
Out-of-bounds Write vulnerability in Apache Hadoop HDFS native client. This issue affects Apache Hadoop: from 3.2.0 before 3.4.2. Users are recommended to upgrade to version 3.4.2, which fixes the issue.
Coverage 1 article · 1 outlet
- CVE-2025-27821: Apache Patches Out-of-Bounds Write Flaw in Hadoop HDFS ClientSecurityOnline · first in our coverage