CVE-2026-43868

MediumCVSS 5.3

Published: 05/05/2026(UTC)Updated: 21/07/2026(UTC)Translated: 22/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.67%

48th percentile - higher than 48% of all known CVEs

Summary

Vulnerability in Apache Thrift involving memory allocation with excessive size. Affects versions before 0.23.0.

Risk Assessment

An attacker can cause service crash by exhausting memory, leading to denial of service (DoS).

Recommendation

Upgrade Apache Thrift to version 0.23.0 or later immediately.

Original NVD description (English source)

Memory Allocation with Excessive Size Value vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.