A malformed T_EXCEPTION reply sent by a server to an Apache bRPC Thrift client causes the Thrift library to throw an exception that is not caught, leading to std::terminate() being invoked. The entire client process is terminated, causing loss of all in‑flight RPC calls. This is a classic remote denial‑of‑service issue that can be triggered by an untrusted server.

The vulnerability affects Apache bRPC builds that enable the optional WITH_THRIFT feature. Any version of bRPC prior to 1.18.0 that includes this feature is susceptible. Builds that do not enable WITH_THRIFT or use bRPC 1.18.0 or newer are not impacted.

The flaw is remotely exploitable by a server peer that can send a malformed T_EXCEPTION reply. No official CVSS or EPSS score is provided, and the vulnerability is not listed in the CISA KEV catalog. Based on the description, it is inferred that an attacker could repeatedly send the malformed reply to trigger process termination. The attack requires connectivity to the vulnerable client and an untrusted server, which is considered a high‑risk scenario in the threat model. The exploitation mechanism is straightforward and does not require additional privileges or user interaction.