CVE-2026-58662

CVE-2026-58662 affects the Apache Thrift C++ bindings. The issue is an improper validation of a specified quantity in input, causing an out-of-bounds read in the C++ THeaderTransport::readString() path. Affected: Thrift before 0.24.0. Impact is described as high in the provided metrics. Remediati...

CVE-2026-49158

CVE-2026-49158 describes an Improper Handling of Highly Compressed Data (Data Amplification) in the Apache Thrift Ruby bindings (THeaderTransport). The issue affects Thrift versions before 0.24.0. The vulnerability allows amplification of data via ZLIB decompression, which can impact availability...