Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-83632

Apache Thrift: C++ THttpTransport grows its line buffer without bound

Published
Last modified
Status
published
Known exploitation
Not listed in CISA KEV
Fix
Fixed in 0.25.0
Public exploit
None on Exploit-DB
CISA SSVC
  • Exploitation: none
  • Automatable: no
  • Technical impact: total
?

Decision points from CISA's Vulnrichment, assessed (SSVC 2.0.3).

SSVC documentation

Summary

Allocation of resources without limits or throttling, Integer overflow or wraparound, Heap-based buffer overflow vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

Affected versions

  • thrift

    fixed in 0.25.0

References 2

lists.apache.org