CVE-2026-58662

The CVE-2026-58662 entry concerns Apache Thrift C++ bindings, specifically the THeaderTransport::readString() info-header length bounds bypass. Root cause is improper validation of the specified quantity in input, resulting in an out-of-bounds read. Affected software is Apache Thrift prior to 0.2...

CVE-2026-49158

CVE-2026-49158 describes an Improper Handling of Highly Compressed Data (Data Amplification) in the Apache Thrift Ruby bindings (THeaderTransport). The issue affects Thrift versions before 0.24.0. The vulnerability allows amplification of data via ZLIB decompression, which can impact availability...