Skip to contentApache Software Foundation Thrift vulnerabilities
- apache software foundation thriftApache Thrift: Java `TSaslNonblockingServer` `Computation.run` orphans a connection on a pre-auth parse errorCVE-2026-94651Fix available8.2 High
- apache software foundation thriftApache Thrift: c_glib TZlibTransport reports a full read after a premature stream endCVE-2026-85483Fix available6.3 Medium
- apache software foundation thriftApache Thrift, Apache Thrift: TProtocolUtil.skip follows peer-chosen nesting to any depth the stack allows (Dart, Java ME)CVE-2026-85493Fix available8.7 High
- apache software foundation thriftApache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: Framed transport and binary protocol size read buffers from a pee…CVE-2026-85494Fix available8.7 High
- apache software foundation thriftApache Thrift: C++ `THeaderTransport::transform()` heap buffer overflow (write direction)CVE-2026-91135Fix available9.2 Critical
- apache software foundation thriftApache Thrift: PHP `thrift_protocol` accelerator: zero-byte container elementsCVE-2026-91137Fix available8.7 High
- apache software foundation thriftApache Thrift: C++ `THeaderTransport::writeVarint32()` stack buffer overflow on a negative protocol idCVE-2026-93925Fix available8.7 High
- apache software foundation thriftApache Thrift: C++ `THeaderTransport::untransform()` leaks the zlib stream on the error pathCVE-2026-93926Fix available8.7 High
- apache software foundation thriftApache Thrift: Dart `TBinaryProtocol.readMessageBegin` allocates from the pre-versioned name lengthCVE-2026-94633Fix available8.7 High
- apache software foundation thriftApache Thrift: Python `TJSONProtocol` has a string length limit that is off by defaultCVE-2026-94634Fix available8.2 High
- apache software foundation thriftApache Thrift: Java `TSaslNonblockingServer`: residual of CVE-2026-61373 (thread-death black hole + no cross-connection budget)CVE-2026-94639Fix available8.2 High
- apache software foundation thriftApache Thrift: Lua `TBinaryProtocol:readMessageBegin` bypasses `checkStringSize` on the pre-versioned nameCVE-2026-94635Fix available8.7 High
- apache thriftApache Thrift: Python TSSLSocket Hostname Matcher ImportCVE-2026-66053Fix available5.9 Medium
- apache thriftApache Thrift: C++ THeaderTransport::readString() info-header length bounds bypassCVE-2026-58662Fix available8.7 High
- apache thriftApache Thrift: Rust binary protocol non-strict path missing string size limitCVE-2026-58389Fix available8.7 High
- apache thriftApache Thrift: c_glib heap out-of-bounds read in transport leftover-bytes pathCVE-2026-58023Fix available6.9 Medium
- apache thriftApache Thrift: C++ ZLIB heap buffer overflow (write) in THeaderTransport::untransform()CVE-2026-55971Fix available9.3 Critical
- apache thriftApache Thrift: C++ heap out-of-bounds read in THeaderTransport::readHeaderFormat()CVE-2026-55970Fix available6.9 Medium
- apache thriftApache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: integer overflow in TProtocol::checkReadBytesAvailable()CVE-2026-55969Fix available8.7 High
- apache thriftApache Thrift: Node.js quadratic-time DoS in server receive transportsCVE-2026-55968Fix available8.7 High
- apache thriftApache Thrift: Ruby THeaderTransport ZLIB Decompression BombCVE-2026-49158Fix available7.5 High
- apache thriftApache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TZlibTransport Decompression Size LimitCVE-2026-48586Fix available8.7 High
- apache thriftApache Thrift: C++ TSSLSocket matchName() RFC 6125 Wildcard BypassCVE-2026-48145Fix available8.2 High
- apache thriftApache Thrift: c_glib TLS Client Missing Hostname VerificationCVE-2026-48144Fix available9.1 Critical
- apache thriftApache Thrift: Unbounded Read Leading to Denial of ServiceCVE-2026-45112Fix available6.9 Medium
- apache thriftApache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TCompactProtocol varint byte-count limitCVE-2026-43871Fix available8.7 High
- apache thriftApache Thrift: Unbounded Zlib Decompression in Python THeaderTransportCVE-2026-41608Fix available7.5 High
- apache thrift, red hat ai inference server, build of apache camel 3.33 for quarkus 3.33.2.sp1 +7 more +9 moreApache Thrift: Rust implementation vulnerable to CVE-2020-13949 patternCVE-2026-43868Fix available5.3 Medium
- apache thriftApache Thrift: Node.js web_server.js multi-vulnerabilityCVE-2026-43870Fix available7.3 High
- apache thrift, red hat cryostat 4 on rhel 9, multicluster global hub +24 more +26 moreApache Thrift: TSSLTransportFactory.java hostname verificationCVE-2026-43869Fix available7.3 High
- apache thriftApache Thrift: Node.js skip() recursionCVE-2026-41636Fix available8.7 High
- apache thrift, red hat multicluster global hub 1.3.4, multicluster global hub 1.4.5 +12 more +14 moreApache Thrift: C++ JSON OOB readCVE-2026-41607Fix available6.5 Medium
- apache thrift, red hat multicluster global hub 1.3.4, multicluster global hub 1.4.5 +12 more +14 moreApache Thrift: c_glib dispatch stack overflowCVE-2026-41606Fix available5.3 Medium
- apache thrift, red hat multicluster global hub 1.3.4, multicluster global hub 1.4.5 +12 more +14 moreApache Thrift: Swift Compact Protocol integer overflowCVE-2026-41605Fix available7.3 High
- apache thrift, red hat multicluster global hub 1.3.4, multicluster global hub 1.4.5 +12 more +14 moreApache Thrift: Swift Range crash in skip()CVE-2026-41604Fix available8.2 High
- apache thrift, red hat multicluster global hub, multicluster global hub 1.3.4 +17 more +19 moreApache Thrift: Go TFramedTransport uint32 overflowCVE-2026-41602Fix available7.5 High
- apache thrift, red hat cryostat 4 on rhel 9, multicluster global hub +16 more +18 moreApache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error.CVE-2025-48431Fix available7.5 High
- apache thrift, hive, oracle communications cloud native core network slice selection function +1 more +3 moreUncontrolled Resource Consumption in Apache ThriftCVE-2020-13949Fix available7.5 High
- apache thrift, oracle communications cloud native core network slice selection function, redhat jboss enterprise application platform +2 moreLoop with Unreachable Exit Condition in Apache ThriftCVE-2019-0205Public exploitFix available7.5 High
- apache thrift, oracle communications cloud native core network slice selection function, redhat jboss enterprise application platform +2 moreOut-of-bounds read in Apache ThriftCVE-2019-0210Fix available7.5 High
- apache thriftApache Thrift Node.js static web server sandbox escapeCVE-2018-11798Fix available6.5 Medium
- apache thrift, debian linux, f5 traffix signaling delivery controller +2 more +4 moreImproper Input Validation in Apache ThriftCVE-2018-1320Fix available7.5 High
- apache thriftApache Thrift Go Library Command InjectionCVE-2016-5397Fix available8.8 High