AVID-2026-R1289

Description

PyArrow, PyArrow: Arbitrary code execution when loading a malicious data file (CVE-2023-47248)

Details

Deserialization of untrusted data in IPC and Parquet readers in PyArrow versions 0.14.0 to 14.0.0 allows arbitrary code execution. An application is vulnerable if it reads Arrow IPC, Feather or Parquet data from untrusted sources (for example user-supplied input files).

This vulnerability only affects PyArrow, not other Apache Arrow implementations or bindings.

It is recommended that users of PyArrow upgrade to 14.0.1. Similarly, it is recommended that downstream libraries upgrade their dependency requirements to PyArrow 14.0.1 or later. PyPI packages are already available, and we hope that conda-forge packages will be available soon.

If it is not possible to upgrade, we provide a separate package pyarrow-hotfix that disables the vulnerability on older PyArrow versions. See https://pypi.org/project/pyarrow-hotfix/ for instructions.

Reason for inclusion in AVID: CVE-2023-47248 describes a PyArrow deserialization vulnerability causing arbitrary code execution when loading untrusted data (IPC/Parquet). PyArrow is a common dependency in AI data pipelines and model serving stacks; exploitation affects software used to build/train/deploy AI systems. It is a software supply chain vulnerability in AI software stacks, not hardware-only.

References

Affected or Relevant Artifacts

Developer: Apache Software Foundation
Deployer: Apache Software Foundation
Artifact Details:

Type	Name
System	PyArrow
System	PyArrow

Impact

AVID Taxonomy Categorization

Risk domains: Security
SEP subcategories: S0100: Software Vulnerability
Lifecycle stages: L06: Deployment

CWE

ID	Description
CWE-502	CWE-502 Deserialization of Untrusted Data

Other information

Report Type: Advisory
Credits:
Date Reported: 2023-11-09
Version: 0.3.3
AVID Entry