CVE-2026-82231

A Thrift client in Apache bRPC (versions

EUVD-2026-107218

A Thrift client in Apache bRPC version 1.18.0, built with WITHTHRIFT which is off by default can be crashed by the server peer it talks to. When the server returns a TEXCEPTION reply whose exception struct is malformed, the client decodes it without catching what Apache Thrift throws...