PT-2026-120559

A Thrift client in Apache bRPC version 1.18.0, built with WITH THRIFT which is off by default can be crashed by the server peer it talks to. When the server returns a T EXCEPTION reply whose exception struct is malformed, the client decodes it without catching what Apache Thrift throws...