Apache Software Foundation Apache Thrift vulnerabilities

CVE-2026-66859 [HIGH] CWE-457 CVE-2026-66859: NULL Pointer Dereference, Use of Uninitialized Variable vulnerability in Apache Thrift c_glib bindin NULL Pointer Dereference, Use of Uninitialized Variable vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

CVE-2026-91137 [HIGH] CWE-770 CVE-2026-91137: Improper validation of specified quantity in input, Allocation of resources without limits or thrott Improper validation of specified quantity in input, Allocation of resources without limits or throttling, Excessive Iteration vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

CVE-2026-85493 [HIGH] CWE-248 CVE-2026-85493: Uncontrolled Recursion vulnerability in Apache Thrift Dart and Java ME bindings. This issue affec Uncontrolled Recursion vulnerability in Apache Thrift Dart and Java ME bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

CVE-2018-1320 [HIGH] CWE-295 CVE-2018-1320: Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComple Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be disabled in production settings making the validation incomplete.

CVE-2026-61373 [HIGH] CWE-770 CVE-2026-61373: Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java TSaslNonblo Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java TSaslNonblockingServer. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

CVE-2026-63772 [HIGH] CWE-770 CVE-2026-63772: Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift go bindings. Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift go bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

CVE-2026-83663 [HIGH] CWE-674 CVE-2026-83663: Uncontrolled Recursion vulnerability in Apache Thrift go bindings. Both Go transports satisfy a r Uncontrolled Recursion vulnerability in Apache Thrift go bindings. Both Go transports satisfy a read out of a buffered frame and, when that frame yields no payload bytes, read the next frame and call `Read` again instead of looping. A peer produces such a frame for 4 bytes in `TFramedTransport` (a declared size of zero) or 18 bytes in `THeaderTransport

CVE-2026-96294 [HIGH] CWE-248 CVE-2026-96294: Uncaught exception, Improper Handling of Exceptional Conditions vulnerability in Apache Thrift NodeJ Uncaught exception, Improper Handling of Exceptional Conditions vulnerability in Apache Thrift NodeJS bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

CVE-2026-94633 [HIGH] CWE-130 CVE-2026-94633: Memory allocation with excessive size value, Improper handling of length parameter inconsistency vul Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift Dart bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

CVE-2026-93926 [HIGH] CWE-401 CVE-2026-93926: Missing release of memory after effective lifetime, Missing release of resource after effective life Missing release of memory after effective lifetime, Missing release of resource after effective lifetime vulnerability in Apache Thrift THeaderTransport. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

CVE-2026-87117 [HIGH] CWE-476 CVE-2026-87117: NULL pointer dereference vulnerability in Apache Thrift PHP bindings. This issue affects Apache T NULL pointer dereference vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

CVE-2026-41604 [HIGH] CWE-125 CVE-2026-41604: Out-of-bounds Read vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Out-of-bounds Read vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

CVE-2026-94636 [HIGH] CWE-409 CVE-2026-94636: Improper handling of highly compressed data (data amplification), Function call with incorrectly spe Improper handling of highly compressed data (data amplification), Function call with incorrectly specified arguments, Improper validation of specified quantity in input vulnerability in Apache Thrift py bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

CVE-2026-90440 [HIGH] CWE-248 CVE-2026-90440: Uncaught exception, improper handling of exceptional conditions, improper resource shutdown vulnerab Uncaught exception, improper handling of exceptional conditions, improper resource shutdown vulnerability in Apache Thrift D thrift.server.nonblocking.TNonblockingServer. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

CVE-2025-48431 [HIGH] CWE-762 CVE-2025-48431: Mismatched Memory Management Routines vulnerability in Apache Thrift c_glib language bindings. This Mismatched Memory Management Routines vulnerability in Apache Thrift c_glib language bindings. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue. Description: Specially crafted requests can crash an c_glib-based Thrift server with a clean but fatal "free(): invalid pointer" err

CVE-2026-43870 [HIGH] CWE-22 CVE-2026-43870: Origin Validation Error, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversa Origin Validation Error, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting'), Uncontrolled Resource Consumption vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to v

CVE-2026-96287 [HIGH] CWE-407 CVE-2026-96287: Inefficient Algorithmic Complexity vulnerability in Apache Thrift Perl bindings. This issue affec Inefficient Algorithmic Complexity vulnerability in Apache Thrift Perl bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

CVE-2026-96289 [HIGH] CWE-674 CVE-2026-96289: Uncontrolled Recursion vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thr Uncontrolled Recursion vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

CVE-2026-82459 [HIGH] CWE-191 CVE-2026-82459: Integer underflow (wrap or wraparound), Out-of-bounds write vulnerability in Apache Thrift C++ 32 bi Integer underflow (wrap or wraparound), Out-of-bounds write vulnerability in Apache Thrift C++ 32 bit THeaderTransport. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

CVE-2026-94650 [HIGH] CWE-674 CVE-2026-94650: Uncontrolled Recursion vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Uncontrolled Recursion vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.