High severity7.5NVD Advisory· Published Aug 6, 2026· Updated Aug 7, 2026

CVE-2026-34502

Description

Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client

This issue affects Apache Portable Runtime Utility: from 1.3.0 through 1.6.3.

LLM-synthesized narrative grounded in this CVE's description and references.

osv-coords12 versions
pkg:rpm/almalinux/apr-util-lmdb pkg:rpm/almalinux/apr-util pkg:rpm/almalinux/apr-util-ldap pkg:rpm/almalinux/apr-util-mysql pkg:rpm/almalinux/apr-util-pgsql pkg:rpm/almalinux/apr-util-sqlite pkg:rpm/almalinux/apr-util-devel pkg:rpm/opensuse/apr-util&distro=openSUSE%20Leap%2016.0 pkg:bitnami/apr-util pkg:rpm/almalinux/apr-util-bdb pkg:rpm/almalinux/apr-util-odbc pkg:rpm/almalinux/apr-util-openssl
< 1.6.3-23.el10_2.1+ 11 more
- (no CPE)range: < 1.6.3-23.el10_2.1
- (no CPE)range: < 1.6.1-23.el9_8.1
- (no CPE)range: < 1.6.1-23.el9_8.1
- (no CPE)range: < 1.6.1-23.el9_8.1
- (no CPE)range: < 1.6.1-23.el9_8.1
- (no CPE)range: < 1.6.1-23.el9_8.1
- (no CPE)range: < 1.6.1-23.el9_8.1
- (no CPE)range: < 1.6.3-160000.3.1
- (no CPE)range: >= 1.3.0, < 1.6.5
- (no CPE)range: < 1.6.1-23.el9_8.1
- (no CPE)range: < 1.6.1-23.el9_8.1
- (no CPE)range: < 1.6.1-23.el9_8.1
Apache/Apr Util
cpe:2.3:a:apache:apr-util:*:*:*:*:*:*:*:*
Range: >=1.3.0,<=1.6.3
Apache/Apache Portable Runtime Utility memcached clientllm-create
Range: 1.3.0 - 1.6.3
Apache/Portable Runtime Utilityllm-fuzzy
Range: 1.3.0 - 1.6.3