CVE-2026-58662 | Apache Thrift up to 0.23.x Header Length readString memory corruption

July 26, 2026 Yanac

A vulnerability was found in Apache Thrift up to 0.23.x. It has been rated as critical. This affects the function THeaderTransport::readString of the component Header Length Handler. This manipulation causes memory corruption.

This vulnerability is handled as CVE-2026-58662. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More