Description
Access of Uninitialized Pointer vulnerability in Apache Thrift c_glib bindings.



This issue affects Apache Thrift: before 0.25.0.



Users are recommended to upgrade to version 0.25.0, which fixes the issue.
Published: 2026-10-02
Score: 8.7 High
EPSS: < 1% Very Low
KEV: No
Impact: Memory Corruption leading to crashes or data integrity issues
Action: Patch Now
AI Analysis

Impact

Apache Thrift’s c_glib binding function read_message_begin fails to set output parameters when handling non-versioned messages, resulting in an uninitialized pointer. This memory corruption flaw can cause application crashes or, if an attacker controls the data, may lead to memory corruption or data integrity issues. The vulnerability is categorized under CWE-824.

Affected Systems

All installations of Apache Thrift older than version .25.0 are affected. This includes every product that relies on the c_glib bindings of Thrift. The vendor, Apache Software Foundation, has issued a recommendation to upgrade to 0.25.0 or later to remove the flaw.

Risk and Exploitability

The flaw has a CVSS score of 8.7, indicating high severity. EPSS data is not available, and the vulnerability is not currently listed in CISA’s KEV catalog. Although no exploit has been reported, the attack vector is likely remote via network traffic that contains crafted non-versioned Thrift messages. An attacker would need ability to send such messages to the affected Thrift service. Successful exploitation could lead to memory corruption, crashes, or data integrity issues on the host running the service.

Generated by OpenCVE AI on October 2, 2026 at 13:51 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply Apache Thrift 0.25.0 or later, replacing older c_glib bindings.
  • Rebuild or reinstall any C/C++ applications that link against the Thrift c_glib library to ensure the patch is in effect.
  • If an upgrade cannot be performed immediately, isolate the Thrift service from untrusted networks, or block incoming connections that may carry non-versioned messages until a patch is applied.

Generated by OpenCVE AI on October 2, 2026 at 13:51 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sat, 03 Oct 2026 00:30:00 +0000

Type Values Removed Values Added
First Time appeared Redhat
Redhat hummingbird
CPEs cpe:/a:redhat:hummingbird:1
Vendors & Products Redhat
Redhat hummingbird
References
Metrics threat_severity

None

 threat_severity

Important

Fri, 02 Oct 2026 19:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Fri, 02 Oct 2026 15:15:00 +0000

Type Values Removed Values Added
First Time appeared Apache
Apache thrift
Vendors & Products Apache
Apache thrift

Fri, 02 Oct 2026 12:45:00 +0000

Type Values Removed Values Added
Description Access of Uninitialized Pointer vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.
Title Apache Thrift: c_glib read_message_begin leaves output parameters unset for non-versioned messages
Weaknesses CWE-824
References
Metrics cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

Apache Thrift
Redhat Hummingbird
cve-icon MITRE

Status: PUBLISHED

Assigner: apache

Published:

Updated: 2026-10-02T16:52:20.380Z

Reserved: 2026-07-23T23:35:34.025Z

Link: CVE-2026-66081

cve-icon Vulnrichment

Updated: 2026-10-02T16:52:11.367Z

cve-icon NVD

Status : Deferred

Published: 2026-10-02T13:17:53.050

Modified: 2026-10-02T17:17:07.127

Link: CVE-2026-66081

cve-icon Redhat

Severity : Important

Publid Date: 2026-10-02T12:33:13Z

Links: CVE-2026-66081 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-10-02T14:44:11Z

Weaknesses
  • CWE-824

    Access of Uninitialized Pointer