CVE-2026-85494

Improper handling of length parameter inconsistency, Uncaught exception, Inefficient Algorithmic Complexity, Memory allocation with excessive size value, Initialization of a resource with an insecure default vulnerability in Apache Thrift Python, Ruby, Erlang, Lua, Dart, JavaME, Perl, PHP and D language bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

Score
CVSS 4.0 8.7 High
Status
Deferred - security@apache.org
Published
2026-10-02
Last modified
2026-10-07
Weaknesses
CWE-1188, CWE-130, CWE-248, CWE-407, CWE-789

Affected products

References

 
 
© AVABIS GmbH privacypolicy about