PT-2026-104325

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description An issue exists in the c glib bindings involving a NULL pointer dereference and the use of an uninitialized variable. Recommendations Update to version 0.25.0...

PT-2026-104199

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Uncontrolled recursion occurs within the Dart and Java ME bindings. Uncontrolled recursion is a condition where a function calls itself without a proper termination condition, potentially...

CVE-2026-94648: Allocation of Resources Without Limits or Throttling

Allocation of resources without limits or throttling vulnerability in Apache Thrift dart bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

PT-2026-104286

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description An integer underflow wrap or wraparound leads to an out-of-bounds write in the C++ 32-bit THeaderTransport component. An integer underflow occurs when an arithmetic operation results in a valu...

PT-2026-104207

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Apache Thrift Dart bindings contain an issue involving improper handling of length parameter inconsistency, which can lead to memory allocation with an excessive size value. Recommendations...

CVE-2026-96287: Inefficient Algorithmic Complexity

Inefficient Algorithmic Complexity vulnerability in Apache Thrift Perl bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

PT-2026-104200

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Apache Thrift Python, Ruby, Erlang, Lua, Dart, JavaME, Perl, PHP, and D language bindings contain multiple issues, including improper handling of length parameter inconsistency, uncaught...

PT-2026-104310

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description An issue exists in the Apache Thrift ruby bindings where resources are allocated without limits or throttling. This can lead to excessive resource consumption. Recommendations Update to versio...

PT-2026-104305

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description An issue exists in the Apache Thrift dart bindings where resources are allocated without limits or throttling. This can lead to excessive resource consumption. Recommendations Update to versio...

PT-2026-104303

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description A loop with an unreachable exit condition, resulting in an infinite loop, exists within the c glib bindings. Recommendations Update to version 0.25.0...

PT-2026-104285

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Language bindings for Go, netstd, OCaml, Erlang, JavaME, Rust, C++, Java, Kotlin, and D fail to cap size fields during deserialization. This allows a remote client to send an excessively large...

CVE-2026-96288: Uncontrolled Recursion

Uncontrolled Recursion, Allocation of resources without limits or throttling vulnerability in Apache Thrift Erlang bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

PT-2026-104205

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description A stack-based buffer overflow and an incorrect bitwise shift of integer occur in the Apache Thrift C++ THeaderProtocol. A stack-based buffer overflow happens when a program writes more data to...

CVE-2026-63772: Allocation of Resources Without Limits or Throttling

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift go bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

PT-2026-104309

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description An inefficient algorithmic complexity issue exists within the Lua bindings of Apache Thrift, where resources are allocated without proper limits or throttling. Recommendations Upgrade to versi...

PT-2026-104182

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description An uncaught exception vulnerability exists in the Apache Thrift Java bindings due to improper handling of exceptional conditions and the allocation of resources without limits or throttling...

CVE-2026-94655: Allocation of Resources Without Limits or Throttling

Allocation of resources without limits or throttling, Inefficient Algorithmic Complexity vulnerability in Apache Thrift Lua bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-66859: NULL Pointer Dereference

NULL Pointer Dereference, Use of Uninitialized Variable vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

PT-2026-104296

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description The Apache Thrift Python bindings contain an issue involving the improper handling of highly compressed data, which can lead to data amplification. This occurs due to improper validation of th...

PT-2026-104211

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description An uncaught exception issue exists within the Apache Thrift PHP bindings. Recommendations Upgrade to version 0.25.0...