CVE-2026-66837

A flaw exists in the Apache Thrift PHP bindings (versions before 0.25.0 ) where an integer overflow allows a wire-controlled string length to improperly size a stack buffer. This leads to a stack-based buffer overflow when processing specially crafted data. A remote, unauthenticated attacker can ...

CVE-2026-66858

Apache Thrift versions before 0.25.0 are vulnerable to a Denial of Service (DoS) attack due to a flaw in the protocol skip routine. Specifically, multiple language bindings fail to enforce recursion limits when processing skipped fields in incoming messages. A remote, unauthenticated attacker can...

CVE-2026-66859

Apache Thrift versions prior to 0.25.0 are vulnerable to a NULL Pointer Dereference and Use of Uninitialized Variable within the c_glib bindings . Specifically, the c_glib multiplexed processor can be triggered to crash when it encounters a message it cannot route. The impact of this vulnerabilit...

CVE-2026-83632

Versions of Apache Thrift prior to 0.25.0 are vulnerable to a Heap-based buffer overflow , Integer overflow or wraparound , and Allocation of resources without limits or throttling . Specifically, the C++ THttpTransport component can grow its line buffer without bound. This vulnerability could le...

CVE-2026-104733

The ProcessOnes XMMP Server ejabberd (versions

CVE-2026-83663

Apache Thrift (versions before 0.25.0 ) contains an uncontrolled recursion vulnerability in its Go bindings . Specifically, both TFramedTransport and THeaderTransport incorrectly call Read recursively instead of using a loop when a frame yields no payload bytes. A remote attacker can trigger this...

CVE-2026-83745

A vulnerability exists in Apache Thrift before version 0.25.0 affecting the Node.js and D lang bindings. The issue stems from WebSocket server transports reading the payload length from the frame header and immediately allocating that memory without verifying if the bytes have actually arrived. T...

CVE-2026-104611

A stack-based buffer overflow vulnerability exists in the Tenda AC9 (version 15.03.02.13). The flaw is located within an unknown function in the /goform/fast_setting_internet_set file of the POST Request Handler component. By manipulating the netWanType argument, an attacker can trigger the overf...

CVE-2026-85476

Versions of Apache Thrift prior to 0.25.0 are vulnerable to a Loop with unreachable exit condition ('infinite loop') within the c_glib bindings . Specifically, the read_all function spins indefinitely when the underlying read operation returns 0. This vulnerability can lead to high availability i...

CVE-2026-96289

Apache Thrift PHP bindings are vulnerable to an Uncontrolled Recursion vulnerability (CWE-674) in versions before 0.25.0 . Specifically, the php --gen php:inlined struct readers and TProtocol::skipBinary lack a recursion-depth guard, which can lead to a denial of service. Remediation is available...

CVE-2026-96287

The Apache Thrift Perl bindings are vulnerable to an Inefficient Algorithmic Complexity vulnerability (CWE-407) in versions prior to 0.25.0 . The root cause is that the Perl FramedTransport reads and TLS socket writes re-slice the remaining buffer on every call, resulting in quadratic time comple...

CVE-2026-96286

An uncaught exception vulnerability exists in the Apache Thrift Perl bindings for versions before 0.25.0 . The root cause involves the Perl server ending the serve() function when a single connection fails, which can lead to a high impact on availability. Users are recommended to upgrade to versi...

CVE-2026-96277

A flaw in the Apache Thrift Ruby bindings allows a remote attacker to cause a Denial of Service (DoS) . The root cause is the improper handling of exceptional conditions , where the SimpleServer ends serve() on any non-Transport/Protocol exception. By triggering an uncaught exception , an attacke...

CVE-2026-94658

Apache Thrift versions before 0.25.0 are vulnerable to an Inefficient Algorithmic Complexity (CWE-407) issue within the Lua bindings . The root cause is that the Lua TFramedTransport and THttpTransport components re-slice the buffer on every read operation, resulting in quadratic complexity . Thi...

CVE-2026-94657

A vulnerability in the Apache Thrift JavaME bindings allows a remote attacker to cause a Denial of Service (DoS) . The root cause is improper resource allocation controls , where sending requests that trigger unbounded resource consumption can exhaust system resources and make the service unavail...

CVE-2026-94656

The Apache Thrift ruby bindings are vulnerable to an allocation of resources without limits or throttling (CWE-770). Specifically, the rb TJsonProtocol/TJSONProtocol component lacks a string size bound, which could allow for resource exhaustion. This issue affects versions before 0.25.0 . To reme...

CVE-2026-104610

A stack-based buffer overflow vulnerability exists in the Boa Web Server component of Tenda HG7, HG9, and HG10 (300001138_en_xpon) devices. The issue is triggered by manipulating the Ethtype argument within the boaGetVar function of the /boaform/formLoopBack file. This vulnerability can be exploi...

CVE-2026-94655

Apache Thrift versions before 0.25.0 are vulnerable to an Allocation of Resources Without Limits or Throttling and Inefficient Algorithmic Complexity vulnerability within the Lua bindings . Specifically, the TJsonProtocol string and number readers lack size bounds and exhibit quadratic behavior. ...

CVE-2026-94654

The Apache Thrift python bindings are vulnerable to a Loop with unreachable exit condition (infinite loop) vulnerability (CWE-835). Specifically, the Python TNonblockingServer busy-loops and stops selecting all file descriptors after encountering an 8192-byte-boundary frame . This issue affects v...

CVE-2026-85209

The Learning Management System (LMS) developed by AVEZ Electronics Communication Training and Consultancy Trade Inc. is impacted by a Missing Authorization vulnerability (CWE-862). The root cause is incorrectly configured access control security levels , which allows for exploitation. The vulnera...