Out-of-bounds Read Vulnerability in Apache Thrift by Apache

CVE-2026-41607

What is CVE-2026-41607?

An out-of-bounds read vulnerability has been identified in Apache Thrift, affecting versions prior to 0.23.0. This security flaw can potentially allow attackers to access sensitive information outside of the intended memory boundaries. To mitigate the risks associated with this vulnerability, users are strongly encouraged to upgrade to version 0.23.0 or later, which includes necessary security fixes to address this issue effectively.

References