PT-2026-104322

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description An issue exists in the Apache Thrift Delphi bindings buffered transport where resources are allocated without limits or throttling. This can lead to excessive resource consumption...

PT-2026-104325

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description An issue exists in the c glib bindings involving a NULL pointer dereference and the use of an uninitialized variable. Recommendations Update to version 0.25.0...

PT-2026-104301

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Improper handling of length parameter inconsistency in the Node.js and D language bindings allows for memory allocation with excessive size values. The WebSocket server transports in both...

PT-2026-104326

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Apache Thrift contains an issue involving the allocation of resources without limits or throttling, integer overflow or wraparound, and a heap-based buffer overflow. A heap-based buffer overfl...

PT-2026-104327

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description An uncontrolled recursion issue exists in the Go bindings. Both Go transports attempt to satisfy a read from a buffered frame; if the frame contains no payload bytes, the system reads the next...

PT-2026-104311

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description An issue exists in the Apache Thrift JavaME bindings where resources are allocated without limits or throttling. This can lead to resource exhaustion. Recommendations Update to version 0.25.0...

PT-2026-104333

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Apache Thrift C++ bindings contain an issue where the C++ THeaderTransport does not enforce the configured maxFrameSize. This leads to the allocation of resources without limits or throttling...

PT-2026-104331

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Apache Thrift Java bindings contain an issue where resources are allocated without limits or throttling, which can lead to resource exhaustion. Recommendations Upgrade to version 0.25.0...

PT-2026-104334

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description An allocation of resources without limits or throttling issue exists in the C++, Java, Go, netstd, Python, and Delphi bindings. Specifically, the TJSONProtocol accepts a single JSON string or...

PT-2026-104321

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description An access of uninitialized pointer issue exists within the c glib bindings of Apache Thrift. Recommendations Upgrade to version 0.25.0...

PT-2026-104287

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Apache Thrift perl bindings contain an issue involving improper certificate validation and the initialization of a resource with an insecure default. Recommendations Upgrade to version 0.25.0...

PT-2026-104286

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description An integer underflow wrap or wraparound leads to an out-of-bounds write in the C++ 32-bit THeaderTransport component. An integer underflow occurs when an arithmetic operation results in a valu...

PT-2026-104297

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Apache Thrift Go bindings contain an issue involving the improper handling of highly compressed data, which can lead to data amplification. Data amplification occurs when a small amount of inp...

PT-2026-104294

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description An issue exists in the thrift.server.nonblocking.TNonblockingServer involving an uncaught exception, improper handling of exceptional conditions, and improper resource shutdown. Recommendation...

PT-2026-104290

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Apache Thrift NodeJS bindings using TJSONProtocol contain an infinite loop caused by an unreachable exit condition and a prototype pollution issue, which occurs when object prototype attribute...

PT-2026-104296

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description The Apache Thrift Python bindings contain an issue involving the improper handling of highly compressed data, which can lead to data amplification. This occurs due to improper validation of th...

PT-2026-104295

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description The Apache Thrift C++ WebSocket server contains an issue involving the use of an uninitialized resource and the return of an incorrect status code. Recommendations Update to version 0.25.0...

PT-2026-104289

Name of the Vulnerable Software and Affected Versions Apache Thrift C++ library versions 0.7.0 through 0.24.0 Apache Thrift D library versions 0.9.0 through 0.24.0 Description Improper validation of certificates with host mismatches occurs in the C++ and D libraries. The default access manager fo...

PT-2026-104285

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Language bindings for Go, netstd, OCaml, Erlang, JavaME, Rust, C++, Java, Kotlin, and D fail to cap size fields during deserialization. This allows a remote client to send an excessively large...

PT-2026-104292

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description The D language bindings contain an integer underflow wrap or wraparound issue, which can lead to an uncaught exception and a loop with an unreachable exit condition, resulting in an infinite...