CVE-2026-55971 | Apache Thrift up to 0.23.x untransform heap-based overflow

July 26, 2026 Yanac

A vulnerability was found in Apache Thrift up to 0.23.x and classified as critical. Affected is the function THeaderTransport::untransform. Executing a manipulation can lead to heap-based buffer overflow.

This vulnerability appears as CVE-2026-55971. The attacker needs to be present on the local network. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More