PT-2026-104332

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description An allocation of resources without limits or throttling issue exists in the Apache Thrift Go bindings. This can lead to an unauthenticated single-packet crash of Go Thrift servers through the...

CVE-2026-63772: Allocation of Resources Without Limits or Throttling

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift go bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

PT-2026-104181

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Improper handling of length parameter inconsistency and allocation of resources without limits or throttling in Apache Thrift Lua bindings. Specifically, the TBinaryProtocol:readMessageBegin...

PT-2026-104182

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description An uncaught exception vulnerability exists in the Apache Thrift Java bindings due to improper handling of exceptional conditions and the allocation of resources without limits or throttling...

PT-2026-104193

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description The Apache Thrift Python bindings contain an issue where resources are allocated without limits or throttling and a resource is initialized with an insecure default. Recommendations Update to...

PT-2026-104198

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description The c glib bindings in Apache Thrift contain an issue involving the use of an uninitialized resource and the return of an incorrect status code. Recommendations Update to version 0.25.0...

PT-2026-104199

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Uncontrolled recursion occurs within the Dart and Java ME bindings. Uncontrolled recursion is a condition where a function calls itself without a proper termination condition, potentially...

PT-2026-104204

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Apache Thrift PHP bindings contain an issue involving improper validation of specified quantities in input, allocation of resources without limits or throttling, and excessive iteration. This...

PT-2026-104206

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Apache Thrift contains a memory leak and resource leak in the THeaderTransport component, where memory and resources are not released after their effective lifetime. Recommendations Update to...

PT-2026-104207

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Apache Thrift Dart bindings contain an issue involving improper handling of length parameter inconsistency, which can lead to memory allocation with an excessive size value. Recommendations...

PT-2026-104208

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Apache Thrift java bindings contain an issue involving the improper handling of exceptional conditions and the missing release of resources after their effective lifetime. Recommendations...

PT-2026-104211

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description An uncaught exception issue exists within the Apache Thrift PHP bindings. Recommendations Upgrade to version 0.25.0...

PT-2026-104212

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Apache Thrift PHP bindings contain an issue where resources are allocated without limits or throttling, which can lead to resource exhaustion. Recommendations Update to version 0.25.0...

PT-2026-104213

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Apache Thrift nodejs bindings contain an issue where input quantities are not properly validated, leading to the allocation of resources without limits or throttling. This can result in resour...

PT-2026-104215

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Apache Thrift Erlang bindings contain an issue involving uncontrolled recursion and the allocation of resources without limits or throttling. Recommendations Upgrade to version 0.25.0...

PT-2026-104216

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Apache Thrift Lua bindings contain an inefficient regular expression complexity and inefficient algorithmic complexity issue. This can lead to performance degradation or resource exhaustion wh...

PT-2026-104218

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description An issue exists in the Apache Thrift Erlang bindings where resources are allocated without limits or throttling. This can lead to excessive resource consumption. Recommendations Upgrade to...

PT-2026-104286

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description An integer underflow wrap or wraparound leads to an out-of-bounds write in the C++ 32-bit THeaderTransport component. An integer underflow occurs when an arithmetic operation results in a valu...

PT-2026-104287

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Apache Thrift perl bindings contain an issue involving improper certificate validation and the initialization of a resource with an insecure default. Recommendations Upgrade to version 0.25.0...

PT-2026-104288

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Apache Thrift python bindings contain an issue involving improper certificate validation and the return of incorrect status codes. Recommendations Upgrade to version 0.25.0...