Skip to main content

Apache Thrift CVE-2026-55969

| EUVDEUVD-2026-49153 HIGH
Integer Overflow or Wraparound (CWE-190)
2026-07-24 GHSA-x8jh-qfcv-fp29
Apache Buffer Overflow Integer Overflow Thrift Red Hat Suse
8.7
CVSS 4.0 · Vendor
Share

Severity by source

Vendor (CNA) PRIMARY
8.7 HIGH
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
7.5 HIGH

Remote unauthenticated attacker causes denial of service; no integrity or confidentiality impact evident.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
SUSE
HIGH
qualitative
Red Hat
7.5 HIGH
qualitative

Primary rating from Vendor (CNA).

CVSS VectorVendor

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

3
Patch available
Jul 27, 2026 - 12:16 EUVD
Analysis Generated
Jul 26, 2026 - 12:08 vuln.today
CVE Published
Jul 24, 2026 - 22:42 oss-security
CRITICAL

Description PRE-NVD

Disclosed via oss-security. NVD scoring and full description are pending.

AnalysisAI

Denial of service in Apache Thrift through an integer overflow in the TProtocol::checkReadBytesAvailable() function affects C++ and c_glib bindings before 0.24.0. Attackers can send crafted messages to crash the service. No known active exploitation or public exploit code.

Technical ContextAI

Apache Thrift is a cross-language RPC framework. The vulnerability lies in the C++ and c_glib protocol implementations, where an integer overflow occurs when checking available read bytes (CWE-190 - Integer Overflow or Wraparound). Affected products include Apache Thrift before version 0.24.0, as identified by the vendor. No specific CPE strings were provided.

RemediationAI

Upgrade to Apache Thrift 0.24.0, which contains the fix. No workarounds are provided in the advisory. The official announcement is at https://seclists.org/oss-sec/2026/q3/268.

More in Thrift

View all
CVE-2021-24028 CRITICAL
9.8 Apr 14

An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code e
CVE-2026-55971 CRITICAL
9.3 Jul 24

Heap-based buffer overflow in Apache Thrift C++ THeaderTransport::untransform() allows remote code execution by sending

CVE-2026-48144 CRITICAL
9.1 Jul 24

Improper certificate validation in Apache Thrift c_glib TLS clients allows man-in-the-middle attackers to intercept or t
CVE-2026-58662 HIGH
8.7 Jul 24

Apache Thrift C++ library's THeaderTransport::readString() fails to properly validate info-header length, allowing an ou
CVE-2026-58389 HIGH
8.7 Jul 24

Denial of service vulnerability in Apache Thrift Rust bindings prior to 0.24.0 allows remote attackers to exhaust memory
CVE-2026-55968 HIGH
8.7 Jul 24

Denial of service in Apache Thrift Node.js server bindings before 0.24.0 allows remote attackers to exhaust server CPU r
CVE-2026-48586 HIGH
8.7 Jul 24

Data amplification vulnerability in Apache Thrift's TZlibTransport allows remote attackers to exhaust server resources b
CVE-2026-43871 HIGH
8.7 Jul 24

Denial of service vulnerability in Apache Thrift's TCompactProtocol implementation allows remote attackers to trigger in
CVE-2026-48145 HIGH
8.2 Jul 24

TLS hostname verification bypass in Apache Thrift C++ bindings allows man-in-the-middle interception of Thrift RPC commu
CVE-2026-41604 HIGH
8.2 Apr 28

Out-of-bounds read vulnerability in Apache Thrift Swift implementation allows remote unauthenticated attackers to trigge
CVE-2019-3565 HIGH
7.5 May 06

Legacy C++ Facebook Thrift servers (using cpp instead of cpp2) would not error upon receiving messages with containers o
CVE-2019-3558 HIGH
7.5 May 06

Python Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. Rated

Same weakness CWE-190 – Integer Overflow or Wraparound

View all
CVE-2013-2729 CRITICAL POC
9.8
CVE-2015-8651 HIGH
8.8
CVE-2012-5054 HIGH POC
8.8
CVE-2014-0569 CRITICAL POC
9.3
CVE-2023-21716 CRITICAL POC
9.8
CVE-2017-3599 HIGH POC
7.5
CVE-2017-7529 HIGH
7.5
CVE-2016-1010 HIGH
8.8

Same technique Buffer Overflow

View all
CVE-2017-7269 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2020-0796 CRITICAL POC
10.0
CVE-2019-11043 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8

Vendor StatusVendor

SUSE

Severity: Important
Product Status
SUSE Package Hub 15 SP7 Fixed
openSUSE Tumbleweed Fixed
SUSE Package Hub 15 SP7 Affected

Share

CVE-2026-55969 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy