8.7
Élevée
CVE-2026-85494 Improper handling of length parameter inconsistency, Uncaught exception, Inefficient Algorithmic Complexity, Memory…
Description
Improper handling of length parameter inconsistency, Uncaught exception, Inefficient Algorithmic Complexity, Memory allocation with excessive size value, Initialization of a resource with an insecure default vulnerability in Apache Thrift Python, Ruby, Erlang, Lua, Dart, JavaME, Perl, PHP and D language bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache Thrift 0.25 | premières → < 0.25.0 | 0.25.0 |
Références
- lists.apache.org lists.apache.org
- lists.apache.org lists.apache.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Apache Thrift
Les 91 CVE de Apache Thrift →
CVE-2026-120135
Uncontrolled Recursion vulnerability in Apache Thrift Java bindings
8.2
Élevée
CVE-2026-66054
Allocation of Resources Without Limits or Throttling, Improper Handling of Highly Compressed Data (Data Amplification)…
6.9
Moyenne
CVE-2026-61374
Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings
7.1
Élevée
CVE-2026-63772
Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift go bindings
8.7
Élevée