A vulnerability, which was classified as critical, has been found in Apache Arrow C++ up to 23.0.0. This affects an unknown function of the component IPC File Parser. The manipulation leads to use after free.
This vulnerability is uniquely identified as CVE-2026-25087. The attack can only be initiated within the local network. No exploit exists.
It is advisable to upgrade the affected component.
