Skip to content

Vulnerabilities of Apache Software Foundation Apache Thrift

Is your version affected?

CVE Summary Score Published
CVE-2026-94651 improper handling of exceptional conditions, Missing release of resource after effective lifetime vulnerability in… 8.2 High Oct 2, 2026
CVE-2026-85483 Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift c_glib bindings 6.3 Medium Oct 2, 2026
CVE-2026-85493 Uncontrolled Recursion vulnerability in Apache Thrift Dart and Java ME bindings 8.7 High Oct 2, 2026
CVE-2026-85494 Improper handling of length parameter inconsistency, Uncaught exception, Inefficient Algorithmic Complexity, Memory… 8.7 High Oct 2, 2026
CVE-2026-91135 Heap-based buffer overflow vulnerability in Apache Thrift C++ THeaderTransport 9.2 Critical Oct 2, 2026
CVE-2026-91137 Improper validation of specified quantity in input, Allocation of resources without limits or throttling, Excessive… 8.7 High Oct 2, 2026
CVE-2026-93925 Stack-based buffer overflow, Incorrect bitwise shift of integer vulnerability in Apache Thrift C++ THeaderProtocol 8.7 High Oct 2, 2026
CVE-2026-93926 Missing release of memory after effective lifetime, Missing release of resource after effective lifetime vulnerability… 8.7 High Oct 2, 2026
CVE-2026-94633 Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache… 8.7 High Oct 2, 2026
CVE-2026-94634 Allocation of resources without limits or throttling, Initialization of a resource with an insecure default… 8.2 High Oct 2, 2026
CVE-2026-94639 improper handling of exceptional conditions, Allocation of resources without limits or throttling, Uncaught exception… 8.2 High Oct 2, 2026
CVE-2026-94635 Allocation of resources without limits or throttling, Improper handling of length parameter inconsistency… 8.7 High Oct 2, 2026
CVE-2026-66053 Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift Python bindings 5.9 Medium Jul 27, 2026
CVE-2026-58662 Improper Validation of Specified Quantity in Input, Out-of-bounds Read vulnerability in Apache Thrift C++ bindings 8.7 High Jul 27, 2026
CVE-2026-58389 Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Rust bindings 8.7 High Jul 27, 2026
CVE-2026-58023 Out-of-bounds Read vulnerability in Apache Thrift c_glib bindings 6.9 Medium Jul 27, 2026
CVE-2026-55971 Heap-based Buffer Overflow vulnerability in Apache Thrift C++ bindings 9.3 Critical Jul 27, 2026
CVE-2026-55970 Buffer Over-read vulnerability in Apache Thrift C++ bindings 6.9 Medium Jul 27, 2026
CVE-2026-55969 Integer Overflow or Wraparound vulnerability in Apache Thrift C++, c_glib, Go, netstd, Delphi and Haxe bindings 8.7 High Jul 27, 2026
CVE-2026-55968 Inefficient Algorithmic Complexity, Allocation of Resources Without Limits or Throttling vulnerability in Apache… 8.7 High Jul 27, 2026
CVE-2026-49158 Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift Ruby bindings 7.5 High Jul 27, 2026
CVE-2026-48586 Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go,… 8.7 High Jul 27, 2026
CVE-2026-48145 Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift C++ bindings 8.2 High Jul 27, 2026
CVE-2026-48144 Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift c_glib bindings 9.1 Critical Jul 27, 2026
CVE-2026-45112 Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings 6.9 Medium Jul 27, 2026

Other Apache Software Foundation products