> CVE-2025-48431

« BACK_TO_HOME
PUBLISHED
2026-04-28 10:16
MODIFIED
2026-04-28 10:16
EPSS (Prob. Exploit)
1.08%
Top 35.2%
DATA SOURCES:
NVD 🔗 2026-04-28 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-10-25 MSRC 🔗 2026-11-02

> DESCRIPTION

Mismatched Memory Management Routines vulnerability in Apache Thrift c_glib language bindings. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue. Description: Specially crafted requests can crash an c_glib-based Thrift server with a clean but fatal "free(): invalid pointer" error message.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-762

> CWE DETAILED DESCRIPTIONS

CWE-762: Mismatched Memory Management Routines - The product attempts to return a memory resource to the system, but it calls a release function that is not compatible with the function that was originally used to allocate that resource.

> RED HAT SECURITY ADVISORIES

Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.15.3 security update
Red Hat Advanced Cluster Management for Kubernetes 2.15 General Availability release images, which add new features and enhancements, bug fixes, and updated container images.
Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.16.2 security update
Red Hat Advanced Cluster Management for Kubernetes 2.16 General Availability release images, which add new features and enhancements, bug fixes, and updated container images.
Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.10.0 release
Red Hat OpenShift distributed tracing platform (Tempo) 3.10.0 has been released
Red Hat Security Advisory: Red Hat build of Cryostat security update
An update is now available for the Red Hat build of Cryostat 4 on RHEL 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring Syste...
Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.14.3 security update
Red Hat Advanced Cluster Management for Kubernetes 2.14 General Availability release images, which add new features and enhancements, bug fixes, and updated container images.

> HISTORIQUE DES MODIFICATIONS

Première apparition
28/04/2026 10:16
Source: NVD
📊 ENRICHISSEMENT 01/05/2026 06:01
CWE
Champ modifié: Description CWE
Ancienne valeur:
N/A
Nouvelle valeur:
CWE-762: Mismatched Memory Management Routines - The product attempts to return a memory resource to the system, but it calls a release function that is not compatible with the function that was origi...
Total des modifications: 1 Dernière mise à jour: 6 months ago

> REFERENCES

https://lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwql
http://www.openwall.com/lists/oss-security/2026/04/28/8
« BACK_TO_HOME