SUSE CVE-2026-55969

Integer Overflow or Wraparound vulnerability in Apache Thrift C++, cglib, Go, netstd, Delphi and Haxe bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

BIT-THRIFT-2026-48144 Apache Thrift: c_glib TLS Client Missing Hostname Verification

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

CVE-2026-58023

CVE-2026-58023: Out-of-bounds read in Apache Thrift c_glib bindings (transport leftover-bytes path). Affected software: Apache Thrift c_glib bindings prior to 0.24.0. Root cause per sources is an out-of-bounds read vulnerability in the c_glib component. Impact is described as read access with pot...

CVE-2025-48431 Apache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error.

Mismatched Memory Management Routines vulnerability in Apache Thrift cglib language bindings. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue. Description: Specially crafted requests can crash an cglib-based Thrift server...

CVE-2025-48431 Apache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error.

Mismatched Memory Management Routines vulnerability in Apache Thrift cglib language bindings. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue. Description: Specially crafted requests can crash an cglib-based Thrift server...

thrift-c_glib:fuzz_parse_compact: Segv on unknown address in g_int64_hash

Detailed Report: https://oss-fuzz.com/testcase?key=5403895039066112 Project: thrift-cglib Fuzzing Engine: afl Fuzz Target: fuzzparsecompact Job Type: aflasanthrift-cglib Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: gint64hash libglib-2.0.so.0 containersread...

thrift-c_glib:fuzz_parse_binary: Invalid-free in libglib-2.0.so.0

Detailed Report: https://oss-fuzz.com/testcase?key=4563024831905792 Project: thrift-cglib Fuzzing Engine: afl Fuzz Target: fuzzparsebinary Job Type: aflasanthrift-cglib Platform Id: linux Crash Type: Invalid-free Crash Address: 0x0c0003070001 Crash State: libglib-2.0.so.0 ghashtableremoveall...