Uncontrolled Recursion Vulnerability in Apache Thrift Dart and Java ME Bindings

CVE-2026-85493

What is CVE-2026-85493?

An uncontrolled recursion vulnerability exists in the Apache Thrift Dart and Java ME bindings, which may lead to potential denial of service attacks. This vulnerability affects all versions prior to 0.25.0, making systems susceptible to unbounded resource consumption during the processing of specific recursive calls. To mitigate risks associated with this issue, users are strongly advised to upgrade to version 0.25.0, which addresses the vulnerability and enhances the overall stability and security of the Thrift framework.

References