CVE-2026-58023

CriticalCVSS 9.1

Published: 27/07/2026(UTC)Updated: 27/07/2026(UTC)Translated: 27/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.08%

62th percentile - higher than 62% of all known CVEs

Summary

A vulnerability in Apache Thrift c_glib bindings before version 0.24.0 causes an out-of-bounds read, potentially leading to data disclosure or crash.

Risk Assessment

An attacker can exploit this to read sensitive memory data or cause a denial of service (DoS).

Recommendation

Update Apache Thrift to version 0.24.0, which fixes this vulnerability.

Original NVD description (English source)

Out-of-bounds Read vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.