← CVE Intelligence

CVE-2026-85493

Apache Thrift, Apache Thrift: TProtocolUtil.skip follows peer-chosen nesting to any depth the stack allows (Dart, Java ME) PUBLISHED

Description (CNA)

Uncontrolled Recursion vulnerability in Apache Thrift Dart and Java ME bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

Affected (CNA)

Vendor / productVersions
Apache Software Foundation / Apache Thriftaffected 0 before 0.25.0
Apache Software Foundation / Apache Thriftaffected 0 before 0.25.0

CWE

CWE-674, CWE-248

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.