PT-2026-104182 · Apache · Apache Thrift

Sylwester Lachiewicz

·

CVE-2026-94639

·

Publicado

2026-10-02

·

Atualizado

2026-10-02

CVSS v4.0

8.2

Alta

VetorAV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
improper handling of exceptional conditions, Allocation of resources without limits or throttling, Uncaught exception vulnerability in Apache Thrift Java bindings.
This issue affects Apache Thrift: before 0.25.0.
Users are recommended to upgrade to version 0.25.0, which fixes the issue.

Correção

Allocation of Resources Without Limits

Improper Handling of Exceptional Conditions

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-248CWE-770CWE-755

Identificadores relacionados

CVE-2026-94639

Produtos afetados

Apache Thrift