https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T12:49:10.595111+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-thrift-2026-87117 BIT-thrift-2026-87117 — Apache Thrift: PHP `thrift_protocol` accelerator dereferences a missing container-element spec 2026-10-21T12:49:10.673022+00:00

Affected: Bitnami: thrift

NULL pointer dereference vulnerability in Apache Thrift PHP bindings.

This issue affects Apache Thrift: before 0.25.0.

Users are recommended to upgrade to version 0.25.0, which fixes the issue.

 https://cve.radiocsirt.org/vuln/euvd-2026-382313 EUVD-2026-382313 2026-10-21T12:49:10.673080+00:00 EUVD-2026-382313 https://cve.radiocsirt.org/vuln/fkie_cve-2026-87117 fkie_cve-2026-87117 2026-10-21T12:49:10.673097+00:00

NULL pointer dereference vulnerability in Apache Thrift PHP bindings.

This issue affects Apache Thrift: before 0.25.0.

Users are recommended to upgrade to version 0.25.0, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-j57f-6rh8-9c2j GHSA-j57f-6rh8-9c2j 2026-10-21T12:49:10.673123+00:00

NULL pointer dereference vulnerability in Apache Thrift PHP bindings.

This issue affects Apache Thrift: before 0.25.0.

Users are recommended to upgrade to version 0.25.0, which fixes the issue.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-87117 msrc_CVE-2026-87117 — Apache Thrift: PHP `thrift_protocol` accelerator dereferences a missing container-element spec 2026-10-21T12:49:10.673140+00:00 msrc_CVE-2026-87117 https://cve.radiocsirt.org/vuln/rhsa-2026:74369 RHSA-2026:74369 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-21T12:49:10.673157+00:00

thrift: thrift: Denial of Service via improper handling of compressed data thrift: thrift: Denial of Service via uncontrolled resource allocation thrift: thrift: Denial of Service via uninitialized pointer access in c_glib bindings thrift: thrift: Denial of Service via excessive resource allocation in Delphi buffered transport thrift: thrift: Denial of Service via buffer overflow in PHP bindings thrift: Apache Thrift: Denial of Service via deeply nested unknown fields thrift: thrift: Denial of Service via NULL pointer dereference in c_glib bindings thrift: thrift: Denial of Service via excessive memory allocation thrift: thrift: Denial of Service via integer underflow in THeaderTransport thrift: thrift: Denial of Service via excessive memory allocation in WebSocket transport thrift: thrift: Information disclosure via improper certificate validation in Perl bindings thrift: Apache Thrift: Python ≥3.12 host-name check silently becomes a no-op thrift: thrift: Man-in-the-middle attacks via improper certificate validation thrift: Apache Thrift: c_glib `read_all` spins when the underlying read returns 0 thrift: Apache Thrift: c_glib TZlibTransport reports a full read after a premature stream end thrift: Apache Thrift, Apache Thrift: TProtocolUtil.skip follows peer-chosen nesting to any depth the stack allows (Dart, Java ME) thrift: thrift: Denial of Service via improper message handling in language bindings thrift: thrift: Denial of Service via TJSONProtocol in Node.js bindings th…

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-87117 UBUNTU-CVE-2026-87117 2026-10-21T12:49:10.673262+00:00

Affected: Ubuntu:20.04:LTS: thrift, Ubuntu:22.04:LTS: thrift, Ubuntu:24.04:LTS: thrift, Ubuntu:26.10: thrift, Ubuntu:26.04:LTS: thrift

NULL pointer dereference vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.