Apache Thrift Integer Overflow Vulnerability in Swift Compact Protocol

Vulnerability

A vulnerability allowing integer overflow or wraparound has been identified in Apache Thrift versions prior to 0.23.0. This issue arises within the Swift Compact Protocol, potentially leading to unexpected behavior or exploitation.

Impact

Exploitation of this vulnerability could result in integer overflow, which may be leveraged to cause buffer overflows or other memory-related issues, depending on the context in which the vulnerability is exploited.

Remediation

Users are advised to upgrade to Apache Thrift version 0.23.0 or later, which addresses this vulnerability.

Added: Apr 28, 2026, 10:34 AM
Updated: Apr 28, 2026, 10:34 AM

Vulnerability Rating

Custom Algorithm
spread
6.2
impact
0.6
exploitability
7.4
remediation
7.7
relevance
6.9
threat
0.0
urgency
2.9
incentive
4.2

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.