CVE-2026-91137

The Apache Thrift PHP bindings are vulnerable to Improper Validation of Specified Quantity in Input , Allocation of Resources Without Limits or Throttling , and Excessive Iteration vulnerabilities. This issue specifically affects versions before 0.25.0 . The root cause involves improper handling ...

CVE-2026-66837: Stack-based Buffer Overflow

Stack-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in Apache Thrift php bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-94638: Allocation of Resources Without Limits or Throttling

Allocation of resources without limits or throttling vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-91137: Improper Validation of Specified Quantity in Input

Improper validation of specified quantity in input, Allocation of resources without limits or throttling, Excessive Iteration vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-94642: Uncaught Exception

Uncaught exception vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-94644: Allocation of Resources Without Limits or Throttling

Allocation of resources without limits or throttling vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-94653: Inefficient Algorithmic Complexity

Inefficient Algorithmic Complexity vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-96289: Uncontrolled Recursion

Uncontrolled Recursion vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

PT-2026-104211

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description An uncaught exception issue exists within the Apache Thrift PHP bindings. Recommendations Upgrade to version 0.25.0...

PT-2026-104316

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Uncontrolled recursion occurs within the PHP bindings of Apache Thrift. Uncontrolled recursion is a condition where a function calls itself without a proper termination condition, potentially...

PT-2026-104293

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description A NULL pointer dereference occurs within the Apache Thrift PHP bindings. A NULL pointer dereference is a condition where a program attempts to read or write to a memory address that is NULL,...

PT-2026-104298

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Apache Thrift PHP bindings contain an issue where resources are allocated without limits or throttling, which can lead to resource exhaustion. Recommendations Update to version 0.25.0...

PT-2026-104323

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Stack-based Buffer Overflow, Integer Overflow or Wraparound issue exists in the php bindings of Apache Thrift. Recommendations Upgrade to version 0.25.0...

PT-2026-104212

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Apache Thrift PHP bindings contain an issue where resources are allocated without limits or throttling, which can lead to resource exhaustion. Recommendations Update to version 0.25.0...

PT-2026-104307

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Inefficient Algorithmic Complexity in Apache Thrift PHP bindings. Recommendations Upgrade to version 0.25.0...

CVE-2026-87117: NULL Pointer Dereference

NULL pointer dereference vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

PT-2026-104204

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Apache Thrift PHP bindings contain an issue involving improper validation of specified quantities in input, allocation of resources without limits or throttling, and excessive iteration. This...

thrift: thrift: Denial of Service via buffer overflow in PHP bindings

A flaw was found in Apache Thrift. An integer overflow within the PHP bindings leads to a stack-based buffer overflow when processing specially crafted data. A remote, unauthenticated attacker could exploit this flaw to crash the service, leading to a Denial of Service DoS...

thrift: Apache Thrift: Denial of Service via uncontrolled resource allocation in PHP bindings

A flaw was found in the Apache Thrift PHP bindings. Due to a lack of limits or throttling on resource allocation, a remote attacker can send crafted requests that consume excessive system resources. This issue can lead to a Denial of Service DoS for the affected service...

Apache Thrift Python, Go, PHP and Java bindings have an Infinite Loop

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Thrift Python, Go, PHP and Java bindings.This issue affects Apache Thrift: before 0.24.0.Users are recommended to upgrade to version 0.24.0, which fixes the issue...