Most recent entries from all

BIT-thrift-2026-87117 — Apache Thrift: PHP `thrift_protocol` accelerator dereferences a missing container-element spec

Affected: Bitnami: thrift

NULL pointer dereference vulnerability in Apache Thrift PHP bindings.

This issue affects Apache Thrift: before 0.25.0.

Users are recommended to upgrade to version 0.25.0, which fixes the issue.

EUVD-2026-382313

fkie_cve-2026-87117

NULL pointer dereference vulnerability in Apache Thrift PHP bindings.

This issue affects Apache Thrift: before 0.25.0.

Users are recommended to upgrade to version 0.25.0, which fixes the issue.

GHSA-j57f-6rh8-9c2j

NULL pointer dereference vulnerability in Apache Thrift PHP bindings.

This issue affects Apache Thrift: before 0.25.0.

Users are recommended to upgrade to version 0.25.0, which fixes the issue.

msrc_CVE-2026-87117 — Apache Thrift: PHP `thrift_protocol` accelerator dereferences a missing container-element spec

msrc_CVE-2026-87117

RHSA-2026:74369 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

thrift: thrift: Denial of Service via improper handling of compressed data thrift: thrift: Denial of Service via uncontrolled resource allocation thrift: thrift: Denial of Service via uninitialized pointer access in c_glib bindings thrift: thrift: Denial of Service via excessive resource allocation in Delphi buffered transport thrift: thrift: Denial of Service via buffer overflow in PHP bindings thrift: Apache Thrift: Denial of Service via deeply nested unknown fields thrift: thrift: Denial of Service via NULL pointer dereference in c_glib bindings thrift: thrift: Denial of Service via excessive memory allocation thrift: thrift: Denial of Service via integer underflow in THeaderTransport thrift: thrift: Denial of Service via excessive memory allocation in WebSocket transport thrift: thrift: Information disclosure via improper certificate validation in Perl bindings thrift: Apache Thrift: Python ≥3.12 host-name check silently becomes a no-op thrift: thrift: Man-in-the-middle attacks via improper certificate validation thrift: Apache Thrift: c_glib `read_all` spins when the underlying read returns 0 thrift: Apache Thrift: c_glib TZlibTransport reports a full read after a premature stream end thrift: Apache Thrift, Apache Thrift: TProtocolUtil.skip follows peer-chosen nesting to any depth the stack allows (Dart, Java ME) thrift: thrift: Denial of Service via improper message handling in language bindings thrift: thrift: Denial of Service via TJSONProtocol in Node.js bindings th…

UBUNTU-CVE-2026-87117

Affected: Ubuntu:20.04:LTS: thrift, Ubuntu:22.04:LTS: thrift, Ubuntu:24.04:LTS: thrift, Ubuntu:26.10: thrift, Ubuntu:26.04:LTS: thrift

NULL pointer dereference vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.