TI-2026-40371 CVE-2026-55969 · GHSA-x8jh-qfcv-fp29
Integer overflow in Apache Thrift
Priority MEDIUM 46
Integer Overflow or Wraparound vulnerability in Apache Thrift C++, c_glib, Go, netstd, Delphi and Haxe bindings.
RHSA-2026:94503
RHEL AI 3.4 RPM runtime CVE fix - thrift
Released 2026-11-03 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AI 3.4 for RHEL 9 perl-thrift-1:0.15.0-8.el9ai, python3-thrift-1:0.15.0-8.el9ai, thrift-1:0.15.0-8.el9ai +3
Fixes 2 records
TI-2026-31935 CVE-2026-43871 · GHSA-8wv5-x4w7-5gww
Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TCompactProtocol varint byte-count limit
Priority MEDIUM 46
Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Thrift Python, Go, PHP and Java bindings.This issue affects Apache Thrift: before 0.24.0.