Prodigysec/pyarrow-CVE-2023-47248

PoC

Repo containing pyarrow 14.0.0, vulnerable to RCE - CVE-2023-47248

view exploit source poc_in_githubauthor Prodigysecpublished 2025-12-27catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2023-47248US	critical9.8	14.5% (97th)	Exploit	2023-11-09
Deserialization of untrusted data in IPC and Parquet readers in PyArrow versions 0.14.0 to 14.0.0 allows arbitrary code execution. An application is vulnerable if it reads Arrow IP…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.