← CVE Intelligence

CVE-2026-66331

Apache Thrift: Buffered transport reads are not accounted against MaxMessageSize PUBLISHED

Description (CNA)

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Delphi bindings buffered transport. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

Affected (CNA)

Vendor / productVersions
Apache Software Foundation / Apache Thriftaffected 0 before 0.25.0

CWE

CWE-770

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.