diff --git a/dataset/pom.xml b/dataset/pom.xml
index 5ef34b40ca..4fbe088ca8 100644
--- a/dataset/pom.xml
+++ b/dataset/pom.xml
@@ -34,7 +34,7 @@ under the License.
     <surefire.argLine.extend>--add-reads=org.apache.arrow.dataset=com.fasterxml.jackson.databind --add-opens=java.base/java.nio=org.apache.arrow.dataset</surefire.argLine.extend>
     <arrow.cpp.build.dir>../../../cpp/release-build/</arrow.cpp.build.dir>
     <parquet.version>1.18.1</parquet.version>
-    <avro.version>1.12.1</avro.version>
+    <avro.version>1.12.2</avro.version>
   </properties>
 
   <dependencies>
diff --git a/pom.xml b/pom.xml
index 5594188054..bc0e2cbb7e 100644
--- a/pom.xml
+++ b/pom.xml
@@ -104,7 +104,7 @@ under the License.
     <dep.jackson-bom.version>2.22.3</dep.jackson-bom.version>
     <dep.hadoop.version>3.5.0</dep.hadoop.version>
     <dep.fbs.version>25.2.10</dep.fbs.version>
-    <dep.avro.version>1.12.1</dep.avro.version>
+    <dep.avro.version>1.12.2</dep.avro.version>
     <dep.parquet.version>1.18.1</dep.parquet.version>
     <dep.mockito-bom.version>5.23.0</dep.mockito-bom.version>
     <arrow.vector.classifier/>