CVE-2026-55970 | Apache Thrift up to 0.23.x readHeaderFormat out-of-bounds

A vulnerability has been found in Apache Thrift up to 0.23.x and classified as problematic. This impacts the function THeaderTransport::readHeaderFormat. Performing a manipulation results in out-of-bounds read.

This vulnerability is reported as CVE-2026-55970. The attacker must have access to the local network to execute the attack. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More