PUBLISHED
2026-05-05 09:16
MODIFIED
2026-05-05 09:16
EPSS (Prob. Exploit)
0.71%
Top 46.4%
> DESCRIPTION
Memory Allocation with Excessive Size Value vulnerability in Apache Thrift.
This issue affects Apache Thrift: before 0.23.0.
Users are recommended to upgrade to version 0.23.0, which fixes the issue.
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
> CWE DETAILED DESCRIPTIONS
CWE-789: Memory Allocation with Excessive Size Value - The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amounts of memory to be allocated.
> RED HAT SECURITY ADVISORIES
Red Hat Security Advisory: Red Hat build of Apache Camel 4.18 for Quarkus 3.33 security update
A security update for Red Hat build of Apache Camel 4.18 for Quarkus 3.33 is now available.
This text-only errata provides information about enhancements that improve your developer experience and en...
Red Hat Security Advisory: RHOAI 2.25.9 - Red Hat OpenShift AI
Updated images are now available for Red Hat OpenShift AI.
> GITHUB SECURITY ADVISORY
GHSA-2f9f-gq7v-9h6m
MODERATE
Apache Thrift has a Memory Allocation with Excessive Size Value Vulnerability
AFFECTED PACKAGES:
RUST / thrift
< 0.23.0
Fixed in: 0.23.0
> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)
Apache Thrift: Rust implementation vulnerable to CVE-2020-13949 pattern
AFFECTED PACKAGES:
Unknown / Unknown
1 versions affected
ALIASES:
BIT-thrift-2026-43868, GHSA-2f9f-gq7v-9h6m
> HISTORIQUE DES MODIFICATIONS
Première apparition
05/05/2026 09:16
Source: NVD
📊
ENRICHISSEMENT
01/06/2026 06:01
CWE
Champ modifié: Description CWE
Nouvelle valeur:
CWE-789: Memory Allocation with Excessive Size Value - The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing ar...
Total des modifications: 1
Dernière mise à jour: 5 months ago