VulnSocial

CVE-2025-27821Disclosure(apache / hadoop)

LOWCVSS 7.3 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch apache hadoop systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Out-of-bounds Write vulnerability in Apache Hadoop HDFS native client. This issue affects Apache Hadoop: from 3.2.0 before 3.4.2. Users are recommended to upgrade to version 3.4.2, which fixes the issue.

apache CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-787

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • hadoop

Threat summary

  • Patch or workaround signal is available
  • 4 mentions across 4 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 4 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked 3d ago at 1 mentions (2026-01-30); latest day: 1
  • 4 total mentions across 4 days

Affected systems

Vendors
apache
Products
hadoop

Deep dive

Activity timeline4 mentions / 4d
00111Mentions · 2026-01-30: 1Mentions · 2026-01-31: 1Mentions · 2026-02-02: 1Mentions · 2026-03-02: 1Patch / Workaround · 2026-03-02: 1Technical Details · 2026-01-30: 1Technical Details · 2026-01-31: 1Technical Details · 2026-02-02: 1Technical Details · 2026-03-02: 101-3001-3102-0203-02
Signal classification3 categories
Disclosure
250.0%
General
125.0%
Patch
125.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-01-301
General1
2026-01-311
Disclosure1
2026-02-021
Disclosure1
2026-03-021
Patch1
Full discourse4 posts
  • iototsecnews@iototsecnews
    Disclosure

    Apache Hadoop HDFS の脆弱性 CVE-2025-27821 が FIX：システムクラッシュ／データ破損の可能性 https://iototsecnews.jp/2026/01/26/apache-hadoop-vulnerability-exposes-systems-potential-crashes-or-data-corruption/ 分散ストレージ・システムである Apache Hadoop のコンポーネント、HDFS ネイティブ・クライアントに深刻な脆弱性 CVE-2025-27821 が見つかりました。この問題の原因は、外部から入力された URI をプログラムが読み取る際に、その長さを正しくチェックせず、用意されたメモリの範囲外にデータを書き込んでしまう “境界外書き込み” の欠陥にあります。 この脆弱性は、HDFS ネイティブ・クライアントが、特別に細工された不正な URI を解析する際に発生します。本来は書き込むべきではないメモリ領域に、データが上書きされてしまうため、システムが突然終了するだけではなく、保存されている重要なデータの破壊や、サービスの利用停止が生じる可能性があります。ご利用のチームは、ご注意ください。 #Apache #CVE202527821 #HadoopHDFS #Vulnerability

    Post summary

    The article discloses a boundary overflow vulnerability (CVE-2025-27821) in Hadoop HDFS that can cause crashes or data corruption, with no PoC, exploit code, or evidence of active exploitation reported.

    01000188
    483 followersView on X
  • Komodo Cyber Security@Komodosec
    Patch

    #VulnerabilityReport #ApacheHadoop CVE-2025-27821: Apache Patches Out-of-Bounds Write Flaw in Hadoop HDFS Client https://securityonline.info/cve-2025-27821-apache-patches-out-of-bounds-write-flaw-in-hadoop-hdfs-client/?utm_source=dlvr.it&utm_medium=twitter

    Post summary

    Apache has released a patch for CVE-2025-27821, addressing an out-of-bounds write flaw in the Hadoop HDFS client.

    00000105
    1.5K followersView on X
  • CRAC Learning - Tech@cracbot
    Disclosure

    CVE-2025-27821 (CVSS:7.3, HIGH) is Analyzed. Out-of-bounds Write vulnerability in Apache Hadoop HDFS native client. This issue affects Apache Hadoop: from 3.2.0 bef..https://nvd.nist.gov/vuln/detail/CVE-2025-27821 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

    Post summary

    The post announces CVE-2025-27821, an out-of-bounds write vulnerability in the Apache Hadoop HDFS native client with a CVSS score of 7.3, impacting versions from 3.2.0 onward, but provides no PoC, exploit, or patch information.

    0000034
    171 followersView on X
  • CRAC Learning - Tech@cracbot
    General

    CVE-2025-27821 (CVSS:7.3, HIGH) is Analyzed. Out-of-bounds Write vulnerability in Apache Hadoop HDFS native client. This issue affects Apache Hadoop: from 3.2.0 bef..https://nvd.nist.gov/vuln/detail/CVE-2025-27821 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

    Post summary

    The text gives a brief CVSS score and a technical description of the vulnerability in Apache Hadoop but provides no exploitation or patch details.

    0000045
    171 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appapachehadoop---

Explore more

Back to dashboardapache CVEshadoop vulnerabilities