CVE-2026-55969 | Apache Thrift up to 0.23.x checkReadBytesAvailable integer overflow

July 26, 2026 Yanac

A vulnerability, which was classified as problematic, was found in Apache Thrift up to 0.23.x. This affects the function TProtocol::checkReadBytesAvailable. Such manipulation leads to integer overflow.

This vulnerability is documented as CVE-2026-55969. The attack requires being on the local network. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More