Lucene search
K

11964 matches found

OSV
OSV
added 2026/05/05 9:31 a.m.4 views

GHSA-2F9F-GQ7V-9H6M Apache Thrift has a Memory Allocation with Excessive Size Value Vulnerability

Memory Allocation with Excessive Size Value vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

5.3CVSS5.8AI score0.00281EPSS
Exploits0References4
EUVD
EUVD
added 2026/05/05 9:31 a.m.15 views

EUVD-2026-27243

Memory Allocation with Excessive Size Value vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

5.3CVSS5.8AI score0.00281EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2026/05/05 9:31 a.m.7 views

Apache Thrift has a Memory Allocation with Excessive Size Value Vulnerability

Memory Allocation with Excessive Size Value vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

5.3CVSS5.8AI score0.00281EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2026/05/05 9:16 a.m.8 views

CVE-2026-43868

Memory Allocation with Excessive Size Value vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

5.3CVSS0.00281EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2026/05/05 9:16 a.m.1 views

CVE-2026-43868

Memory Allocation with Excessive Size Value vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

5.3CVSS5.8AI score0.00281EPSS
Exploits0References2
OSV
OSV
added 2026/05/05 9:16 a.m.0 views

UBUNTU-CVE-2026-43868

Memory Allocation with Excessive Size Value vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

5.3CVSS5.8AI score0.00281EPSS
Exploits0References3
CVE
CVE
added 2026/05/05 7:49 a.m.19 views

CVE-2026-43868

CVE-2026-43868 affects Apache Thrift prior to 0.23.0, where a memory-allocation vulnerability is triggered by excessive size values in RPC messages, potentially enabling a denial of service. The issue is mitigated by upgrading to Thrift 0.23.0 or later. The provided sources confirm the affected v...

5.3CVSS6.7AI score0.00281EPSS
Exploits0References1Affected Software1
AlpineLinux
AlpineLinux
added 2026/05/05 7:49 a.m.3 views

CVE-2026-43868

Memory Allocation with Excessive Size Value vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

5.3CVSS5.8AI score0.00281EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/05/05 7:49 a.m.27 views

CVE-2026-43868 Apache Thrift: Rust implementation vulnerable to CVE-2020-13949 pattern

Memory Allocation with Excessive Size Value vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

0.00281EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2026/05/05 7:49 a.m.4 views

CVE-2026-43868

Memory Allocation with Excessive Size Value vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

5.3CVSS5.8AI score0.00281EPSS
Exploits0
Vulnrichment
Vulnrichment
added 2026/05/05 7:49 a.m.2 views

CVE-2026-43868 Apache Thrift: Rust implementation vulnerable to CVE-2020-13949 pattern

Memory Allocation with Excessive Size Value vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

6.7AI score0.00968EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/05 7:49 a.m.2 views

CVE-2026-43868

Memory Allocation with Excessive Size Value vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

5.8AI score0.00281EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/05/05 12:0 a.m.7 views

Apache Thrift 安全漏洞

Apache Thrift is a framework for cross-platform development developed by the Apache Foundation in the United States. Versions of Apache Thrift prior to 0.23.0 contained a security vulnerability, which was caused by an excessive memory allocation size value...

5.3CVSS5.8AI score0.00281EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/05/05 12:0 a.m.4 views

PT-2026-36991

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.23.0 Description An issue exists involving memory allocation with an excessive size value. Recommendations Upgrade to version 0.23.0...

5.3CVSS5.8AI score0.00281EPSS
Exploits0References8
Tenable Nessus
Tenable Nessus
added 2026/05/05 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-43868

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory Allocation with Excessive Size Value vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to...

5.3CVSS5.8AI score0.00281EPSS
Exploits0References3
Snyk
Snyk
added 2026/05/04 9:28 p.m.4 views

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value via the remote read endpoint when processing snappy-compressed request bodies. An attacker can cause excessive memory allocation and crash the process by sending specially crafted payloads...

8.7CVSS5.8AI score0.00022EPSS
Exploits0References2
Snyk
Snyk
added 2026/05/04 7:29 p.m.4 views

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the nbcolors field of the BMP file header during the loadbmp process. An attacker can cause an out-of-memory condition and crash the application by supplying a crafted BMP file with a large...

6.8CVSS5.8AI score0.0002EPSS
Exploits0References2
OSV
OSV
added 2026/05/04 6:16 p.m.1 views

DEBIAN-CVE-2026-42144

CImg Library is a C++ library for image processing. Prior to commit 4ca26bc, there is an integer overflow vulnerability in the WHD size computation inside loadpnm that can bypass the memory allocation guard. A crafted PNM/PGM/PPM file with large dimension values causes the overflow to wrap around...

6.1CVSS6.1AI score0.0002EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/05/04 5:53 p.m.26 views

CVE-2026-42146 CImg Library: Uncontrolled memory allocation via nb_colors field in _load_bmp

CImg Library is a C++ library for image processing. Prior to commit c3aacf5, the nbcolors field read from the BMP file header is used directly to compute an allocation size without validating it against the remaining file size. A crafted BMP file with a large nbcolors value triggers an...

5.5CVSS0.0002EPSS
Exploits0References4
Debian CVE
Debian CVE
added 2026/05/04 5:53 p.m.3 views

CVE-2026-42146

CImg Library is a C++ library for image processing. Prior to commit c3aacf5, the nbcolors field read from the BMP file header is used directly to compute an allocation size without validating it against the remaining file size. A crafted BMP file with a large nbcolors value triggers an...

5.5CVSS5.7AI score0.0002EPSS
Exploits0
Rows per page
Query Builder