PT-2026-35703 · Apache · Apache Thrift

·

CVE-2026-41607

·

Published

2026-04-28

·

Updated

2026-08-25

CVSS v3.1

9.1

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.23.0
Description An out-of-bounds read issue exists in Apache Thrift, which occurs when the software reads data past the end of the intended buffer.
Recommendations Upgrade to version 0.23.0.

Exploit

Fix

Out of bounds Read

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

AZL-85032
BIT-THRIFT-2026-41607
CVE-2026-41607
ECHO-0EF1-2235-BD97
OPENSUSE-SU-2026:10685-1
OPENSUSE-SU-2026:11040-1
OPENSUSE-SU-2026:11438-1
OPENSUSE-SU-2026:21351-1
SUSE-SU-2026:3056-1
SUSE-SU-2026:3057-1
SUSE-SU-2026:3713-1
SUSE-SU-2026:3714-1
SUSE-SU-2026:3718-1

Affected Products

Apache Thrift