← CVE Intelligence

CVE-2026-41602

Apache Thrift: Go TFramedTransport uint32 overflow PUBLISHED

Description (CNA)

Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

Affected (CNA)

Vendor / productVersions
Apache Software Foundation / Apache Thriftaffected 0 before 0.23.0

CWE

CWE-190

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.

redhat-SADP

A flaw was found in the Apache Thrift TFramedTransport Go language implementation. This integer overflow or wraparound vulnerability could potentially allow an attacker to cause unexpected behavior or resource exhaustion, leading to a denial of service.