CVE-2020-13949

CVE-2020-13949 affects Apache Thrift versions 0.9.3 through 0.13.0. The issue: malicious RPC clients can send short messages that trigger extremely large memory allocations, leading to a denial of service. The connected advisories confirm a remote DoS risk in Thrift with impact on servers handlin...

CVE-2019-0205

CVE-2019-0205 affects Apache Thrift up to version 0.12.0, where a server or client may enter an endless loop when fed specific input data. The issue was partially fixed in 0.11.0, and depending on the language binding, only certain bindings are impacted. Exploitation details are not provided in t...

CVE-2018-11798

The CVE-2018-11798 entry concerns Apache Thrift Node.js static web server (versions 0.9.2–0.11.0) where a remote attacker can access files outside the webroot docroot. Connected sources also reference CVE-2018-1320 in the Thrift TSaslTransport SASL handshake validation issue. NVD metrics cite a b...

CVE-2018-1320

CVE-2018-1320 affects Apache Thrift: Java client library versions 0.5.0–0.11.0. The issue stems from an assert in TSaslTransport.isComplete that validates SASL handshakes; disabling this check can leave SASL negotiation validation incomplete, enabling a security bypass. Multiple connected sources...

CVE-2019-0210

Apache Thrift in versions 0.9.3–0.12.0 has an out-of-bounds read in a Go server using TJSONProtocol/TSimpleJSONProtocol that may panic on invalid input data (CVE-2019-0210). Mitigation via upgrade to newer Thrift versions; Gentoo GLSA 202107-32 recommends >= thrift-0.14.1. Other advisories cor...

CVE-2026-41602

An Integer Overflow or Wraparound vulnerability exists in the Apache Thrift TFramedTransport Go language implementation. This issue affects versions before 0.23.0 and can lead to high availability impact, specifically a denial of service (DoS) as indicated by the CVSS vector. Impacted software in...

CVE-2026-66053

Technical details are not publicly available in the provided documents. Monitor for updates from official advisories to learn affected versions, exploitability, and remediation.

CVE-2026-55971

CVE-2026-55971 describes a heap-based buffer overflow in Apache Thrift C++ bindings triggered by zlib processing in THeaderTransport::untransform(). Affects Apache Thrift versions before 0.24.0. Impacted confidentiality, integrity, and availability as per CVSS 4.0 with a high base score (9.3). Re...

CVE-2026-58662

CVE-2026-58662 affects the Apache Thrift C++ bindings. The issue is an improper validation of a specified quantity in input, causing an out-of-bounds read in the C++ THeaderTransport::readString() path. Affected: Thrift before 0.24.0. Impact is described as high in the provided metrics. Remediati...

CVE-2026-48144

Apache Thrift c_glib bindings are affected by an improper validation of certificate hostnames (host mismatch) leading to a potential TLS trust issue. The issue affects Thrift before 0.24.0 and is rated CRITICAL (CVSS 4.0: AV:N/AC:H/PR:N/UI:N/S:S/VC:H/VI:H/VA:N) with high impact on confidentiality...

CVE-2026-43871

The CVE-2026-43871 entry describes a vulnerability in Apache Thrift bindings for Python, Go, PHP, and Java caused by an infinite loop due to a loop with an unreachable exit condition in TCompactProtocol varint byte-count handling. Affects Thrift versions before 0.24.0; remedy is upgrading to 0.24...

CVE-2025-48431

The Apache Thrift framework is impacted by a Mismatched Memory Management Routines vulnerability in the c_glib language bindings. This issue affects versions before 0.23.0 . Due to memory management mismatches, specially crafted requests can cause a c_glib-based Thrift server to crash, resulting ...

CVE-2026-43869

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

CVE-2015-3254

Apache Thrift client libraries before 0.9.3 are affected by CVE-2015-3254, which could allow a remote authenticated user to trigger a denial of service via infinite recursion in the skip function. Impact is a partial denial of service (availability affected) with network access and no confidentia...

CVE-2026-43868

A Memory Allocation with Excessive Size Value vulnerability (CWE-789) exists in Apache Thrift versions prior to 0.23.0 . This flaw is caused by the software handling excessive size values during memory allocation. Impact and specific exploit details are not provided in the documents. Users are re...

CVE-2026-49158

CVE-2026-49158 describes an Improper Handling of Highly Compressed Data (Data Amplification) in the Apache Thrift Ruby bindings (THeaderTransport). The issue affects Thrift versions before 0.24.0. The vulnerability allows amplification of data via ZLIB decompression, which can impact availability...

CVE-2016-5397

Concisely: CVE-2016-5397 affects the Apache Thrift Go client library. The vulnerability arises from code-generation time where an external formatting tool could allow a remote attacker to execute arbitrary commands, as described for Apache Thrift 0.9.3 and older. The issue is exploitable via Go c...

CVE-2026-41608

CVE-2026-41608 affects Apache Thrift Python bindings prior to 0.24.0, due to an unbounded zlib decompression in the Python THeaderTransport path (Data Amplification). The vulnerability could enable excessive resource consumption under crafted compressed data. A fix is available in Thrift 0.24.0; ...

CVE-2026-58023

CVE-2026-58023: Out-of-bounds read in Apache Thrift c_glib bindings (transport leftover-bytes path). Affected software: Apache Thrift c_glib bindings prior to 0.24.0. Root cause per sources is an out-of-bounds read vulnerability in the c_glib component. Impact is described as read access with pot...

CVE-2026-58389

CVE-2026-58389 affects Apache Thrift before 0.24.0, specifically the Rust binary protocol non-strict path handling. The root cause is an allocation of resources without limits or throttling in the Rust bindings, which can lead to uncontrolled resource consumption. The practical impact is high ava...

CVE-2026-41607

Apache Thrift contains an out-of-bounds read vulnerability (CWE-125) affecting versions before 0.23.0 . The issue is specifically identified as a C++ JSON OOB read in the context of the Apache Thrift framework. This vulnerability can lead to unauthorized data access or system instability. To reme...

CVE-2026-55969

Apache Thrift contains an Integer Overflow in TProtocol::checkReadBytesAvailable() affecting multiple bindings (C++, c_glib, Go, netstd, Delphi, Haxe) and all releases prior to 0.24.0. The issue is triggered via improper read byte count checks, potentially impacting availability. A fix is provide...

CVE-2026-48145

The CVE concerns Apache Thrift’s C++ bindings, specifically the TSSLSocket matchName() path, where improper validation of certificates with host mismatches is reported. Affected versions are Thrift before 0.24.0. The vulnerability arises from RFC 6125 wildcard handling in the certificate host mis...

CVE-2026-55968

CVE-2026-55968 affects Apache Thrift Node.js bindings. The root cause is inefficient algorithmic complexity in server receive transports, causing quadratic-time DoS. Affected versions are before 0.24.0; upgrading to 0.24.0 fixes the issue. Attack vector is network; exploitation status not provide...

CVE-2026-45112

CVE-2026-45112 affects Apache Thrift Java bindings, with an unbounded read/resource allocation vulnerability that can lead to denial of service. The issue involves versions 0.19.0 up to (but not including) 0.24.0. The recommended remediations are to upgrade to version 0.24.0, which fixes the issu...

CVE-2026-55970

Apache Thrift C++ bindings are affected by a heap out-of-bounds read in THeaderTransport::readHeaderFormat() prior to version 0.24.0. The CVE-2026-55970 entry notes this flaw and recommends upgrading to 0.24.0 to fix it. The issue is confirmed across multiple sources in the connected documents (C...

CVE-2026-41636

CVE-2026-41636 describes an Uncontrolled Recursion vulnerability in the Apache Thrift Node.js bindings. Affected software is Apache Thrift versions prior to 0.23.0. The issue is mitigated by upgrading to Thrift 0.23.0, which fixes the problem. The available documents do not specify exact affected...

CVE-2026-48586

Status and affected components: CVE-2026-48586 affects Apache Thrift bindings (C++, Java, Python, Go, D, C/GLib) with a TZlibTransport decompression size limit vulnerability. Root cause/impact: Improper handling of highly compressed data (data amplification) can impact availability and integrity ...

CVE-2026-41606

Apache Thrift versions before 0.23.0 are vulnerable to an uncontrolled recursion vulnerability (CWE-674). This flaw can lead to a dispatch stack overflow in the c_glib language bindings, potentially causing the server to crash with a free(): invalid pointer error. Affected software includes IBM P...

CVE-2026-41605

Apache Thrift contains an integer overflow or wraparound vulnerability (CWE-190) affecting versions before 0.23.0 . The issue is specifically related to the Swift Compact Protocol and results from input validation errors. Impact may include logic errors or system instability. Users are recommende...

CVE-2026-41604

An out-of-bounds read vulnerability exists in Apache Thrift versions prior to 0.23.0 . Specifically, the issue is caused by swift input with an invalid field range in the skip() function, which can lead to an out-of-bounds read and an application crash . Impacted components include github.com/apa...

CVE-2026-43870

Apache Thrift versions prior to 0.23.0 are susceptible to multiple vulnerabilities, including Origin Validation Error , Path Traversal , HTTP Request/Response Splitting (via improper neutralization of CRLF sequences in HTTP headers), and Uncontrolled Resource Consumption . These issues stem from ...