CVE-2026-82231 Apache bRPC: Malformed Thrift T_EXCEPTION reply causes process termination in Thrift client

A Thrift client in Apache bRPC version 1.18.0, built with WITHTHRIFT which is off by default can be crashed by the server peer it talks to. When the server returns a TEXCEPTION reply whose exception struct is malformed, the client decodes it without catching what Apache Thrift throws...

Improper handling of exceptions in Apache bRPC

Versions of Apache bRPC prior to 1.18.0 contain an improper exception handling vulnerability. This vulnerability arises because the Thrift client fails to catch exceptions thrown by Apache Thrift when decoding malformed TException responses returned by the server. As a result, these exceptions ar...

SUSE CVE-2015-3254

The client libraries in Apache Thrift before 0.9.3 might allow remote authenticated users to cause a denial of service infinite recursion via vectors involving the skip function...

com.twitter:finatra-http_2.12 (18.2.0), com.twitter:finatra-thrift_2.12 (18.2.0) +6 more potentially affected by CVE-2020-35774 via com.twitter:twitter-server_2.12 (18.2.0)

com.twitter:twitter-server2.12 MAVEN version 18.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.twitter:twitter-server2.12 and may be impacted: - com.twitter:finatra-http2.12 18.2.0 - com.twitter:finatra-thrift2.12 18.2.0 -...

Man-In-The-Middle (MitM)

thriftclient is vulnerable to man in the middle attacks. The rubygems source is deprecated because HTTP requests are insecure. A malicious user can potentially compromise the source to conduct man-in-the-middle attacks...