PT-2026-104286 · Apache · Apache Thrift

CVE-2026-82459

Published

2026-10-02

Updated

2026-10-02

CVSS v4.0

8.2

High

Vector

AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Integer underflow (wrap or wraparound), Out-of-bounds write vulnerability in Apache Thrift C++ 32 bit THeaderTransport.

This issue affects Apache Thrift: before 0.25.0.

Users are recommended to upgrade to version 0.25.0, which fixes the issue.

Fix

Integer Underflow

Memory Corruption

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2026-82459

Apache Thrift