Red Hat Security Advisory

RHSA-2026:52829

RHEL AI 3.4 RPM runtime CVE fix - thrift

Released 2026-08-10 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AI 3.4 for RHEL 9 perl-thrift-1:0.15.0-6.el9ai, python3-thrift-1:0.15.0-6.el9ai, thrift-1:0.15.0-6.el9ai +3

TI-2026-40373 CVE-2026-55971 · GHSA-gwj4-q93m-wwqc

MEDIUM 50

Heap-based Buffer Overflow vulnerability in Apache Thrift C++ bindings.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00979 Published 2026-07-27 Fixed in 0.24.0 CWE-122

TI-2026-42227 CVE-2026-58662 · GHSA-x4w6-p6f8-24qw

MEDIUM 46

Improper Validation of Specified Quantity in Input, Out-of-bounds Read vulnerability in Apache Thrift C++ bindings.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.01078 Published 2026-07-27 Fixed in 0.24.0 CWE-125

TI-2026-40372 CVE-2026-55970 · GHSA-g7xp-pggm-c7w2

LOW 38

Buffer Over-read vulnerability in Apache Thrift C++ bindings.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00775 Published 2026-07-27 Partial fix · 0.24.0 CWE-126