CVE-2026-43871 Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TCompactProtocol varint byte-count limit

🗓️ 27 Jul 2026 10:56:15Reported by apacheType

CVE-2026-43871: Thrift TCompactProtocol varint loop causes infinite loop in bindings; upgrade to 0.24.0.

Reporter	Title	Published	Views	Family All 473
IBM Security Bulletins	Security Bulletin: IBM SPSS Modeler is affected by vulnerabilities in Apache Thrift	28 Aug 202616:45	–	ibm
IBM Security Bulletins	Security Bulletin: The Network Threat Analytics App for IBM QRadar SIEM contains components with known vulnerabilities	15 Sep 202612:36	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerability identified in libthrift-0.23.0.jar used by IBM Maximo Application Suite - MREF ( CVE-2026-43871, CVE-2026-45112, CVE-2026-48586 )	11 Sep 202618:38	–	ibm
ATTACKERKB	CVE-2026-43871	27 Jul 202610:56	–	attackerkb
AlpineLinux	CVE-2026-43871	27 Jul 202610:56	–	alpinelinux
CBLMariner	CVE-2026-43871 affecting package thrift for versions less than 0.24.0-1	1 Aug 202603:56	–	cbl_mariner
CBLMariner	CVE-2026-43871 affecting package influxdb for versions less than 2.7.5-20	18 Aug 202614:14	–	cbl_mariner
CBLMariner	CVE-2026-43871 affecting package kata-containers-cc for versions less than 3.15.0.aks0-17	1 Sep 202602:21	–	cbl_mariner
CBLMariner	CVE-2026-43871 affecting package telegraf for versions less than 1.31.0-26	9 Aug 202621:52	–	cbl_mariner
CBLMariner	CVE-2026-43871 affecting package vitess for versions less than 19.0.4-12	5 Aug 202610:49	–	cbl_mariner