Description
Heap-based Buffer Overflow vulnerability in Apache Thrift C++ bindings.

This issue affects Apache Thrift: before 0.24.0.

Users are recommended to upgrade to version 0.24.0, which fixes the issue.
Published: 2026-07-27
Score: 9.3 Critical
EPSS: 1.0% Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A heap-based buffer overflow exists in the THeaderTransport::untransform() function of Apache Thrift's C++ bindings. Based on the description, it is inferred that an attacker can write beyond the bounds of a heap buffer when an incoming Thrift message is processed, corrupting memory and potentially allowing arbitrary code execution. This weakness is identified as CWE-122.

Affected Systems

All Apache Thrift releases before 0.24.0 that use the C++ bindings are impacted. The affected component is THeaderTransport within the C++ implementation of Thrift services.

Risk and Exploitability

The CVSS score of 9.3 marks it as a critical vulnerability, and the EPSS score of 1% indicates a low but non-zero probability of exploitation. The vulnerability is not listed in CISA’s KEV catalog. Based on the description, it is inferred that the attack vector would be a malicious Thrift request sent from an external network, which could trigger the overflow and cause a remote code execution or system crash. Although no public exploit is known, the potential impact warrants urgent remediation.

Generated by OpenCVE AI on August 5, 2026 at 00:09 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade Apache Thrift to version 0.24.0 or newer, which contains the fix for the buffer overflow.
  • If upgrading immediately is not feasible, limit Thrift service exposure by applying firewall rules or network segmentation to allow connections only from trusted IP ranges.
  • After implementing a fix or restriction, monitor application logs for abnormal Thrift traffic, errors, or crashes that may signal attempted exploitation.

Generated by OpenCVE AI on August 5, 2026 at 00:09 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sat, 01 Aug 2026 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 8.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

threat_severity

Important

Mon, 27 Jul 2026 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Mon, 27 Jul 2026 13:15:00 +0000

Type Values Removed Values Added
First Time appeared Apache
Apache thrift
Vendors & Products Apache
Apache thrift

Mon, 27 Jul 2026 11:30:00 +0000

Type Values Removed Values Added
Description Heap-based Buffer Overflow vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.
Title Apache Thrift: C++ ZLIB heap buffer overflow (write) in THeaderTransport::untransform()
Weaknesses CWE-122
References
Metrics cvssV4_0

{'score': 9.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

Apache Thrift
cve-icon MITRE

Status: PUBLISHED

Assigner: apache

Published:

Updated: 2026-07-28T03:55:51.567Z

Reserved: 2026-06-17T23:28:34.852Z

Link: CVE-2026-55971

cve-icon Vulnrichment

Updated: 2026-07-27T13:07:26.706Z

cve-icon NVD

Status : Analyzed

Published: 2026-07-27T12:16:46.110

Modified: 2026-07-28T05:17:06.613

Link: CVE-2026-55971

cve-icon Redhat

Severity : Important

Publid Date: 2026-07-27T11:11:23Z

Links: CVE-2026-55971 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-08-05T00:15:04Z

Weaknesses
  • CWE-122

    Heap-based Buffer Overflow