Apache

Thrift

94 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.3

CVE-2026-85483

  • EPSS 0.43%
  • Veröffentlicht 02.10.2026 10:46:55
  • Zuletzt bearbeitet 02.10.2026 17:17:07

Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

8.7

CVE-2026-85493

  • EPSS 0.43%
  • Veröffentlicht 02.10.2026 10:45:57
  • Zuletzt bearbeitet 02.10.2026 17:17:07

Uncontrolled Recursion vulnerability in Apache Thrift Dart and Java ME bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

8.7

CVE-2026-85494

  • EPSS 0.43%
  • Veröffentlicht 02.10.2026 10:42:44
  • Zuletzt bearbeitet 07.10.2026 23:17:00

Improper handling of length parameter inconsistency, Uncaught exception, Inefficient Algorithmic Complexity, Memory allocation with excessive size value, Initialization of a resource with an insecure default vulnerability in Apache Thrift Python, Rub...

9.2

CVE-2026-91135

  • EPSS 0.46%
  • Veröffentlicht 02.10.2026 10:28:50
  • Zuletzt bearbeitet 02.10.2026 18:17:06

Heap-based buffer overflow vulnerability in Apache Thrift C++ THeaderTransport. When an application enables the ZLIB transform for the frames it sends, THeaderTransport::transform() copies the compressed frame into the write buffer without making ...

8.7

CVE-2026-91137

  • EPSS 0.43%
  • Veröffentlicht 02.10.2026 10:18:38
  • Zuletzt bearbeitet 02.10.2026 14:30:28

Improper validation of specified quantity in input, Allocation of resources without limits or throttling, Excessive Iteration vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to...

8.2

CVE-2026-94634

  • EPSS 0.43%
  • Veröffentlicht 02.10.2026 10:17:09
  • Zuletzt bearbeitet 02.10.2026 14:30:28

Allocation of resources without limits or throttling, Initialization of a resource with an insecure default vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to ver...

8.7

CVE-2026-93925

  • EPSS 0.46%
  • Veröffentlicht 02.10.2026 10:16:17
  • Zuletzt bearbeitet 02.10.2026 14:30:28

Stack-based buffer overflow, Incorrect bitwise shift of integer vulnerability in Apache Thrift C++ THeaderProtocol. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

8.7

CVE-2026-93926

  • EPSS 0.43%
  • Veröffentlicht 02.10.2026 10:13:55
  • Zuletzt bearbeitet 02.10.2026 14:30:28

Missing release of memory after effective lifetime, Missing release of resource after effective lifetime vulnerability in Apache Thrift THeaderTransport. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to versi...

8.7

CVE-2026-94633

  • EPSS 0.43%
  • Veröffentlicht 02.10.2026 10:13:00
  • Zuletzt bearbeitet 02.10.2026 14:30:28

Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift Dart bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, ...

8.2

CVE-2026-94639

  • EPSS 0.43%
  • Veröffentlicht 02.10.2026 09:33:52
  • Zuletzt bearbeitet 05.10.2026 17:17:17

improper handling of exceptional conditions, Allocation of resources without limits or throttling, Uncaught exception vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrad...