CVE-2026-58662

CriticalCVSS 9.1

Published: 27/07/2026(UTC)Updated: 27/07/2026(UTC)Translated: 27/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.15%

64th percentile - higher than 64% of all known CVEs

Summary

Improper validation of specified quantity in input and out-of-bounds read in Apache Thrift C++ bindings. Affects versions before 0.24.0.

Risk Assessment

An attacker can cause a crash or data leak by sending specially crafted data.

Recommendation

Upgrade to Apache Thrift version 0.24.0.

Original NVD description (English source)

Improper Validation of Specified Quantity in Input, Out-of-bounds Read vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.