← CVE Intelligence

CVE-2026-91137

Apache Thrift: PHP `thrift_protocol` accelerator: zero-byte container elements PUBLISHED

Description (CNA)

Improper validation of specified quantity in input, Allocation of resources without limits or throttling, Excessive Iteration vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

Affected (CNA)

Vendor / productVersions
Apache Software Foundation / Apache Thriftaffected 0 before 0.25.0

CWE

CWE-1284, CWE-770, CWE-834

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.