The flaw allows an attacker to trigger uncontrolled recursive reads when a zero‑length or minimal payload frame is processed by the Go bindings of Apache Thrift. This recursion consumes the Go stack until a fatal error occurs, causing the entire process to terminate. The vulnerability does not provide code execution or information disclosure but results in a complete service crash and loss of availability.

The issue exists in all releases of Apache Thrift before 0.25.0 that use the Go bindings with either the TFramedTransport or THeaderTransport. Any service or client that accepts frames of zero or minimal size through these transports is vulnerable.

The vulnerability is rated high with a CVSS score of 8.7. The EPSS score is not available, and the issue is not listed in the CISA KEV catalog. An attacker can exploit it remotely by sending crafted frames—4 bytes in TFramedTransport or 18 bytes in THeaderTransport—over the network to the vulnerable Thrift service. The canvas requires network access to the Thrift endpoint and the ability to send arbitrary frames; the exploit will not succeed if the service is isolated or the transports are disabled.