PT-2026-104198

CVE-2026-85483

Published

2026-10-02

Updated

2026-10-09

Description by

CVSS 4.0

6.3

Medium

MetricsAV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0

Description The c glib bindings in Apache Thrift contain an issue involving the use of an uninitialized resource and the return of an incorrect status code.

Recommendations Update to version 0.25.0.

Exploitability

Fix

Impacts

Researchers

Ho1Aas

Vendors

Affected products

Weakness enumeration

CWE-908: Use of Uninitialized Resource

CWE-393: Return of Wrong Status Code

Related identifiers