CVE-2026-85483

A flaw was found in Apache Thrift's C GLib bindings. Due to the use of an uninitialized resource and improper status code handling during request processing, the application can enter an inconsistent state. A remote attacker could exploit this vulnerability to cause a Denial of Service DoS or...

CVE-2026-85476

A flaw was found in Apache Thrift. A remote attacker could cause a Denial of Service DoS by sending specially crafted input to an application using the C GLib bindings. Processing this malformed data triggers an infinite loop, consuming system resources and causing the application to become...

CVE-2026-66859

A flaw was found in Apache Thrift. A remote attacker can cause a Denial of Service DoS by triggering an application crash due to improper memory handling in the C GLib bindings. This vulnerability stems from an uninitialized variable and a null pointer dereference during data processing...

PT-2026-109214

Uncontrolled Recursion vulnerability in Apache Thrift c glib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

PT-2026-109189

Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift c glib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

PT-2026-109179

NULL Pointer Dereference, Use of Uninitialized Variable vulnerability in Apache Thrift c glib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

PT-2026-109188

Loop with unreachable exit condition 'infinite loop' vulnerability in Apache Thrift c glib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-94650

A flaw was found in Apache Thrift. An uncontrolled recursion vulnerability in the C GLib library bindings allows a remote, unauthenticated attacker to send specially crafted input to an affected application. Processing this input triggers excessive nested function calls that exhaust stack memory,...

CVE-2026-66081

A flaw was found in Apache Thrift's C GLib bindings. A remote, unauthenticated attacker could exploit this vulnerability by sending specially crafted input that triggers the access of an uninitialized pointer. This access can cause the application to crash, resulting in a Denial of Service DoS...

PT-2026-104325

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description An issue exists in the c glib bindings involving a NULL pointer dereference and the use of an uninitialized variable. Recommendations Update to version 0.25.0...

PT-2026-104198

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description The c glib bindings in Apache Thrift contain an issue involving the use of an uninitialized resource and the return of an incorrect status code. Recommendations Update to version 0.25.0...

PT-2026-104321

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description An access of uninitialized pointer issue exists within the c glib bindings of Apache Thrift. Recommendations Upgrade to version 0.25.0...

PT-2026-104214

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Uncontrolled recursion occurs within the c glib bindings. Uncontrolled recursion is a condition where a function calls itself without a proper termination condition, potentially leading to a...

PT-2026-104303

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description A loop with an unreachable exit condition, resulting in an infinite loop, exists within the c glib bindings. Recommendations Update to version 0.25.0...

thrift: Apache Thrift: c_glib TZlibTransport reports a full read after a premature stream end

A flaw was found in Apache Thrift's C GLib bindings. Due to the use of an uninitialized resource and improper status code handling during request processing, the application can enter an inconsistent state. A remote attacker could exploit this vulnerability to cause a Denial of Service DoS or...

thrift: thrift: Denial of Service via uninitialized pointer access in c_glib bindings

A flaw was found in Apache Thrift's C GLib bindings. A remote, unauthenticated attacker could exploit this vulnerability by sending specially crafted input that triggers the access of an uninitialized pointer. This access can cause the application to crash, resulting in a Denial of Service DoS...

thrift: thrift: Denial of Service via uncontrolled recursion in C GLib bindings

A flaw was found in Apache Thrift. An uncontrolled recursion vulnerability in the C GLib library bindings allows a remote, unauthenticated attacker to send specially crafted input to an affected application. Processing this input triggers excessive nested function calls that exhaust stack memory,...

SUSE CVE-2026-48144

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

SUSE CVE-2026-58023

Out-of-bounds Read vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

DEBIAN-CVE-2026-58023

Out-of-bounds Read vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...