Apache Portable Runtime Utility vulnerabilities

3 known CVE vulnerabilities in Apache Portable Runtime Utility, translated and rated.

CVE-2026-34191Critical
An SQL Injection vulnerability exists in Apache Portable Runtime Utility via the apr_dbd_oracle provider. This issue affects versions from 1.6.0 through 1.6.3.
CVE-2026-34502High
A heap-based buffer overflow vulnerability exists in the memcached client of Apache Portable Runtime Utility. This issue affects versions from 1.3.0 through 1.6.3.
CVE-2026-34501High
A heap-based buffer overflow vulnerability exists in the redis client of Apache Portable Runtime Utility. This issue affects versions from 1.6.0 through 1.6.3. Users are recommended to upgrade to version 1.6.4, which fixes the issue.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS