apache/thrift · Security
Apache Thrift TFramedTransport Go language implementation has an Integer Overflow or Wraparound vulnerability
- GHSA ID
- GHSA-wf45-q9ch-q8gh
- CVE ID
- CVE-2026-41602
- Severity
- high
- Published
- Updated
- CVSS
- 7.5 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS v3
- 7.5 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation
This issue affects Apache Thrift: before 0.23.0.
Users are recommended to upgrade to version 0.23.0, which fixes the issue.
CWEs
- CWE-190 · Integer Overflow or Wraparound