Volerion logoVolerion
Volerion logoVolerion

Apache Thrift c_glib Memory Management Vulnerability Leading to Denial-of-Service

Vulnerability

A vulnerability in the Apache Thrift c_glib language bindings prior to version 0.23.0 allows specially crafted requests to crash a Thrift server. This crash occurs with a clean but fatal 'free(): invalid pointer' error message, indicating a mismatch in memory management routines.

Impact

Exploitation of this vulnerability causes a denial-of-service condition by crashing the Thrift server with an invalid pointer error.

Remediation

Users are advised to upgrade to Apache Thrift version 0.23.0 or later, which addresses this vulnerability.

Added: Apr 28, 2026, 10:40 AM
Updated: Apr 28, 2026, 10:40 AM

Vulnerability Rating

Custom Algorithm
spread
6.2
impact
2.5
exploitability
7.4
remediation
7.7
relevance
6.9
threat
0.0
urgency
2.9
incentive
4.2

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.