BIT-apr-util-2026-34502: Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client

Q: Which deployments are affected?

Apache Portable Runtime Utility versions 1.3.0 through 1.6.3 are affected. The issue is in the APR memcached client, so exposure is relevant where that client is used.

Q: What does an attacker need to exploit this issue?

The supplied severity data indicates the vulnerability is network-accessible, has low attack complexity, requires no privileges, and does not require user interaction.

Q: What is the expected security impact?

The provided CVSS vector indicates a high availability impact, with no confidentiality or integrity impact listed.

Published Aug 6, 2026

Updated

Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client

This issue affects Apache Portable Runtime Utility: from 1.3.0 through 1.6.3.

Affected Software

1 affected component

Apache Portable Runtime Utility>=1.3.0<=1.6.3

Event History

Aug 6, 2026

CVE Published

via OSV·02:31 PM

Data Sourced

via OSV·02:31 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are affected?

Apache Portable Runtime Utility versions 1.3.0 through 1.6.3 are affected. The issue is in the APR memcached client, so exposure is relevant where that client is used.

What does an attacker need to exploit this issue?

The supplied severity data indicates the vulnerability is network-accessible, has low attack complexity, requires no privileges, and does not require user interaction.

What is the expected security impact?

The provided CVSS vector indicates a high availability impact, with no confidentiality or integrity impact listed.

BIT-apr-util-2026-34502: Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client

Affected Software

Event History

Frequently Asked Questions

Which deployments are affected?

What does an attacker need to exploit this issue?

What is the expected security impact?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are affected?

What does an attacker need to exploit this issue?

What is the expected security impact?