CVE-2026-43868

Published: May 5, 2026

Modified: May 5, 2026

PUBLISHED

Description

Memory Allocation with Excessive Size Value vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

Vendor	Product	Versions
Apache Software Foundation	Apache Thrift	affected `0 - < 0.23.0`

Weaknesses (CWE)

CWE-789

References

https://lists.apache.org/thread/zj76dtwnbbs1m7z3focf4wd51pqpsmn9

vendor-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2026-43868

Description

Affected Products

Weaknesses (CWE)

References