Apache Thrift Out-of-Bounds Read Vulnerability

Vulnerability

A out-of-bounds read vulnerability has been identified in Apache Thrift versions prior to 0.23.0. This vulnerability can lead to a crash in the Swift range handling by causing a read operation to access memory outside the intended bounds.

Impact

Exploitation of this vulnerability leads to a crash of the application, causing a denial-of-service condition.

Remediation

Users are advised to upgrade to Apache Thrift version 0.23.0 or later, which addresses this vulnerability.

Added: Apr 28, 2026, 10:35 AM
Updated: Apr 28, 2026, 10:35 AM

Vulnerability Rating

Custom Algorithm
spread
6.2
impact
2.5
exploitability
7.4
remediation
7.7
relevance
6.9
threat
0.0
urgency
2.9
incentive
4.2

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.