CriticalCritical vulnerability

CVE-2026-83632 (CVSS 9.2)

NVD · officialPublished Oct 2, 2026Risk 50/100

Allocation of resources without limits or throttling, Integer overflow or wraparound, Heap-based buffer overflow vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

Technical details

CVSS

9.2

AV:NetworkAC:HighPR:NoneUI:None

Evidence and sources

This record is attributed to NVD. Exploitation status and remediation guidance are kept separate from the vulnerability's technical severity.

Open primary source