CVE-2026-93925

Summary

Stack-based buffer overflow, Incorrect bitwise shift of integer vulnerability in Apache Thrift C++ THeaderProtocol.

This issue affects Apache Thrift: before 0.25.0.

Users are recommended to upgrade to version 0.25.0, which fixes the issue.

Affected Software

Weaknesses

• CWE-121: CWE-121 Stack-based buffer overflow
• CWE-835: CWE-835
• CWE-1335: CWE-1335 Incorrect bitwise shift of integer

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

References

• https://lists.apache.org/thread/33otcgbqd27wf6qq810q56znzbomnhg1
• https://lists.apache.org/thread/b4rrkrwoyqb9g7hk58d3fx09cbvp1tg9

• ←Previous
• Next→