Ghaith Abdulreda

**Name of the Vulnerable Software and Affected Versions** Apache Thrift versions prior to 0.24.0 **Description** An integer overflow or wraparound issue exists in the C++, c glib, Go, netstd, Delphi, and Haxe bindings. The flaw is located in the `checkReadBytesAvailable()` function of the `TProtocol` class. **Recommendations** Upgrade to version 0.24.0.

**Name of the Vulnerable Software and Affected Versions** Apache Thrift versions prior to 0.24.0 **Description** Buffer Over-read issue in Apache Thrift C++ bindings. The flaw occurs during a heap out-of-bounds read within the `readHeaderFormat()` function of the `THeaderTransport` class. **Recommendations** Upgrade to version 0.24.0.

**Name of the Vulnerable Software and Affected Versions** Apache Thrift versions prior to 0.24.0 **Description** A heap-based buffer overflow exists in the Apache Thrift C++ bindings. The issue occurs during a write operation within the `THeaderTransport::untransform()` function when handling ZLIB compression. **Recommendations** Update to version 0.24.0.