Not rated
CVE-2026-41602 Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue…
Description
Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache Thrift 0.23 | earliest → < 0.23.0 | 0.23.0 |
| Multicluster Global Hub 1.3.4 1779212259 | earliest → < 1779212259 | 1779212259 |
| Multicluster Global Hub 1.4.5 1779579439 | earliest → < 1779579439 | 1779579439 |
| Multicluster Global Hub 1.5.4 1778867753 | earliest → < 1778867753 | 1778867753 |
| Multicluster Global Hub 1.6.2 1780167118 | earliest → < 1780167118 | 1780167118 |
| Multicluster Global Hub 1.7.1 1779925273 | earliest → < 1779925273 | 1779925273 |
| Red Hat Advanced Cluster Management for Kubernetes 2.15 1780677003 | earliest → < 1780677003 | 1780677003 |
| Red Hat Advanced Cluster Management for Kubernetes 2.16 1780926805 | earliest → < 1780926805 | 1780926805 |
| Red Hat OpenShift distributed tracing 3.9.3 1778158374 | earliest → < 1778158374 | 1778158374 |
Show the 28 other branches Hide the 28 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Multicluster Global Hub | Versions not published | |
| Red Hat AI Inference Server | Versions not published | |
| Red Hat Ceph Storage 5 | Versions not published | |
| Red Hat Ceph Storage 6 | Versions not published | |
| Red Hat Ceph Storage 9 | Versions not published | |
| Red Hat OpenShift Container Platform 4 | Versions not published | |
| Red Hat OpenShift GitOps | Versions not published | |
| OpenShift Service Mesh 2 | Versions not published | |
| Red Hat OpenShift AI (RHOAI) | Versions not published | |
| Red Hat OpenStack Platform 18.0 | Versions not published | |
| Red Hat Advanced Cluster Management for Kubernetes 2.14 1782693386 | earliest → < 1782693386 | 1782693386 |
| Red Hat multicluster global hub 1.4.3 1779579439 | earliest → < 1779579439 | 1779579439 |
| Multicluster Global Hub 1.7.0 1779925273 | earliest → < 1779925273 | 1779925273 |
| Red Hat multicluster global hub 1.5.2 1778867753 | earliest → < 1778867753 | 1778867753 |
| Red Hat OpenShift distributed tracing 3.9.2 1778158374 | earliest → < 1778158374 | 1778158374 |
| Red Hat OpenShift distributed tracing 3.9.1 1778158374 | earliest → < 1778158374 | 1778158374 |
| Multicluster Global Hub 1.5.6 1778867753 | earliest → < 1778867753 | 1778867753 |
| Red Hat Advanced Cluster Management for Kubernetes 2.16.0 1780926805 | earliest → < 1780926805 | 1780926805 |
| Red Hat multicluster global hub 1.5.0 1778867753 | earliest → < 1778867753 | 1778867753 |
| Red Hat multicluster global hub 1.4.4 1779579439 | earliest → < 1779579439 | 1779579439 |
| Red Hat multicluster global hub 1.6.0 1780167118 | earliest → < 1780167118 | 1780167118 |
| Red Hat OpenShift distributed tracing 3.9.0 1778158374 | earliest → < 1778158374 | 1778158374 |
| Multicluster Global Hub 1.7.2 1779925273 | earliest → < 1779925273 | 1779925273 |
| Multicluster Global Hub 1.5.7 1778867753 | earliest → < 1778867753 | 1778867753 |
| Multicluster Global Hub 1.6.5 1780167118 | earliest → < 1780167118 | 1780167118 |
| Red Hat multicluster global hub 1.4.2 1779579439 | earliest → < 1779579439 | 1779579439 |
| Red Hat multicluster global hub 1.5.1 1778867753 | earliest → < 1778867753 | 1778867753 |
| Red Hat multicluster global hub 1.5.3 1778867753 | earliest → < 1778867753 | 1778867753 |
References
- lists.apache.org lists.apache.org
Timeline
- Published
- Last modified
Other CVEs of Apache Thrift
The 91 CVEs of Apache Thrift →
CVE-2026-120135
Uncontrolled Recursion vulnerability in Apache Thrift Java bindings
8.2
High
CVE-2026-66054
Allocation of Resources Without Limits or Throttling, Improper Handling of Highly Compressed Data (Data Amplification)…
6.9
Medium
CVE-2026-61374
Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings
7.1
High
CVE-2026-63772
Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift go bindings
8.7
High