Apache Brpc (Apache Software Foundation) - vulnerabilities (CVEs)

41 CVEs, 35 in the last 30 days, 2 known versions, newest CVE from 2026-10-21. Vendor: Apache Software Foundation.

CVEs of Apache Brpc

CVE-2026-90484 - CVSS 6.5 (medium), 2026-10-21: The MySQL client response parser in Apache bRPC dereferences a null pointer when the server peer sends a zero-payload-length response packet. A response…
CVE-2026-87849 - CVSS 4.3 (medium), 2026-10-21: The Discovery naming-service reply parser in Apache bRPC (versions < 1.18.0) calls RapidJSON object-only accessors (FindMember) on JSON values without first…
CVE-2026-86249, 2026-10-21: On a brpc::Server that sets both ServerOptions.auth and ServerOptions.internal_port, the HTTP built-in service exemption on internal_port can be abused to…
CVE-2026-86147, 2026-10-21: External control of file name or path and uncontrolled resource consumption in Apache bRPC (version < 1.18.0) on all platforms allows remote attackers who can…
CVE-2026-86146, 2026-10-21: Inconsistent interpretation of HTTP requests (HTTP request/response smuggling) in the bundled HTTP/1.1 parser of Apache bRPC (version < 1.18.0) on all…
CVE-2026-84748, 2026-10-21: Improper authorization in Apache bRPC (versions < 1.18.0) on all platforms allows remote attackers to access builtin services through the public port. Root…
CVE-2026-84747, 2026-10-21: Interpretation conflict in the HTTP protocol implementation in Apache bRPC (version < 1.18.0) on all platforms allows remote attackers to bypass access…
CVE-2026-84727 - CVSS 5.4 (medium), 2026-10-21: Use-after-free in the RTMP protocol implementation in Apache bRPC (version < 1.18.0) on all platforms allows a malicious RTMP peer to crash the process or…
CVE-2026-82953 - CVSS 5.3 (medium), 2026-10-21: NULL pointer dereference in the RTMP protocol implementation in Apache bRPC (version < 1.18.0) on all platforms allows remote attackers to crash the server…
CVE-2026-82942, 2026-10-21: A data race in the RDMA transport of Apache bRPC (versions < 1.18.0) allows a remote client to crash the server process (denial of service) when RDMA is…
CVE-2026-82425, 2026-10-21: A reachable assertion in Apache bRPC (version < 1.18.0) on all platforms allows a malicious remote peer to crash the process, resulting in denial of service.…
CVE-2026-82231, 2026-10-21: A Thrift client in Apache bRPC (version < 1.18.0, built with WITH_THRIFT which is off by default) can be crashed by the server peer it talks to. When the…
CVE-2026-82230 - CVSS 7.5 (high), 2026-10-21: Uncontrolled recursion in the mcpack2pb component in Apache bRPC (version < 1.18.0) on all platforms allows remote attackers to make the server crash via…
CVE-2026-82210, 2026-10-21: Enforceable assertion in the streaming feature of Apache bRPC (version < 1.18.0) on all platforms allows a remote attacker to crash the server process by…
CVE-2026-81755, 2026-10-21: Uncontrolled resource consumption in the streaming RPC component of Apache bRPC (version < 1.18.0) allows a remote attacker to exhaust server memory and cause…
CVE-2026-80463, 2026-10-21: Unbounded memory accumulation in the stream message reassembly path of Apache bRPC (version < 1.18.0) on all platforms allows remote attackers to exhaust the…
CVE-2026-79704, 2026-10-21: An out-of-bounds read vulnerability exists in the streaming RPC client of Apache bRPC (versions 1.11.0 through 1.17.0) on all platforms. A client that…
CVE-2026-78334, 2026-10-21: Missing authentication in the streaming RPC path of Apache bRPC (version < 1.18.0) on all platforms allows a remote attacker to bypass server authentication…
CVE-2026-78066, 2026-10-21: Resource exhaustion in Apache bRPC (version < 1.18.0) on all platforms: multiple parsers that accept wire-controlled input bound no limit on the sizes…
CVE-2026-78058, 2026-10-21: Uncontrolled resource consumption in the HTTP/2 (h2) receive path of Apache bRPC (version < 1.18.0) on all platforms allows a remote unauthenticated attacker…
CVE-2026-78048, 2026-10-21: A reachable-assertion flaw in the HPACK header-compression decoder of the HTTP/2 (h2/gRPC) stack in Apache bRPC (version < 1.18.0) on all platforms allows a…
CVE-2026-74758, 2026-10-21: A heap use-after-free in the RTMP protocol component of Apache bRPC (versions < 1.18.0) allows a remote attacker to crash a bRPC RTMP server by sending a…
CVE-2026-74757 - CVSS 7.5 (high), 2026-10-21: Uncontrolled resource allocation in the mcpack2pb component in Apache bRPC (version < 1.18.0) on all platforms allows remote attackers to make the server…
CVE-2026-74755, 2026-10-21: An integer underflow in the mcpack2pb component of Apache bRPC (version < 1.18.0) on all platforms allows remote attackers to crash a bRPC server by sending a…
CVE-2026-66392, 2026-10-21: Apache bRPC versions before 1.18.0 validate the server certificate chain when client TLS peer verification is enabled, but do not bind the certificate to an…
CVE-2026-61916, 2026-10-21: Out-of-bounds reads in URL parsing and case-insensitive header lookup in Apache bRPC before version 1.18.0 on platforms where plain char is unsigned, such as…
CVE-2026-61902, 2026-10-21: Apache bRPC versions before 1.18.0 do not consistently enforce the configured max_body_size limit in non-progressive HTTP/1 and HTTP/2 parsing and in memcache…
CVE-2026-58064, 2026-10-21: The Redis protocol implementation in Apache bRPC allowed inline command parsing to allocate and copy the full connection buffer before a complete…
CVE-2026-56388, 2026-10-21: The Redis server command parser in Apache bRPC accepts an empty RESP array as a command header. A remote unauthenticated attacker who can reach a bRPC server…
CVE-2026-56387, 2026-10-21: The RTMP AMF parser in Apache bRPC accepts AMF string lengths and array counts directly from untrusted input. A remote unauthenticated attacker who can reach…
CVE-2026-56386 - CVSS 7.5 (high), 2026-10-21: Integer underflow and out-of-bounds read in the HTTP/2 server DATA frame parser in Apache bRPC allows an unauthenticated remote attacker to cause denial of…
CVE-2026-54427, 2026-10-21: Uncontrolled recursion in the AMF parser in Apache bRPC < 1.18.0 allows a remote RTMP peer to crash a bRPC process by sending deeply nested AMF objects or…
CVE-2026-54426, 2026-10-21: Uncontrolled recursion in the Redis reply parser in Apache bRPC < 1.18.0 allows a remote Redis server peer to crash a bRPC Redis client process by returning a…
CVE-2026-54425, 2026-10-21: Uncontrolled recursion in the HTTP/2 HPACK decoder in Apache bRPC before 1.18.0 allows remote attackers to cause denial of service by sending a crafted HTTP/2…
CVE-2026-48830, 2026-10-21: Improper authentication in Apache bRPC through 1.17.0 allows a remote unauthenticated attacker to bypass authentication for protected non-builtin HTTP…
CVE-2025-60021 - CVSS 9.8 (critical), 2026-01-16: Remote command injection vulnerability in heap profiler builtin service in Apache bRPC ((all versions < 1.15.0)) on all platforms allows attacker to inject…
CVE-2025-59789 - CVSS 7.5 (high), 2025-12-01: Uncontrolled recursion in the json2pb component in Apache bRPC (version < 1.15.0) on all platforms allows remote attackers to make the server crash via…
CVE-2025-54472 - CVSS 7.5 (high), 2025-08-14: Unlimited memory allocation in redis protocol parser in Apache bRPC (all versions < 1.14.1) on all platforms allows attackers to crash the service via…
CVE-2024-23452 - CVSS 7.5 (high), 2024-02-08: Request smuggling vulnerability in HTTP server in Apache bRPC 0.9.5~1.7.0 on all platforms allows attacker to smuggle request. Vulnerability Cause…
CVE-2023-45757 - CVSS 6.1 (medium), 2023-10-16: Security vulnerability in Apache bRPC <=1.6.0 on all platforms allows attackers to inject XSS code to the builtin rpcz page. An attacker that can send http…
CVE-2023-31039 - CVSS 9.8 (critical), 2023-05-08: Security vulnerability in Apache bRPC <1.5.0 on all platforms allows attackers to execute arbitrary code via ServerOptions::pid_file. An attacker that can…