How severe is CVE-2025-48431?

CVE-2025-48431 has a CVSS 3.x base score of 7.5, rated high severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability high.

Is CVE-2025-48431 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (60th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2025-48431?

CVE-2025-48431 affects Apache Thrift. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2025-48431?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

Does CVE-2025-48431 have an EU (EUVD) identifier?

Yes. CVE-2025-48431 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-209581.

When was CVE-2025-48431 published?

CVE-2025-48431 was published on 2026-04-28 and last updated on 2026-07-01.

CVE-2025-48431

CVE-2025-48431 is a high-severity vulnerability in Apache Thrift with a CVSS 3.x base score of 7.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-762.

Key facts

Severity: High (CVSS 3.x base score 7.5)
EPSS exploit prediction: 1% (60th percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2025-209581
Weakness: CWE-762
Affected product: Apache Thrift
Published: 2026-04-28
Last modified: 2026-07-01

Description

Mismatched Memory Management Routines vulnerability in Apache Thrift c_glib language bindings. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue. Description: Specially crafted requests can crash an c_glib-based Thrift server with a clean but fatal "free(): invalid pointer" error message.

Frequently asked questions

What is CVE-2025-48431?: Mismatched Memory Management Routines vulnerability in Apache Thrift c_glib language bindings. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue. Description: Specially crafted requests can crash an c_glib-based Thrift server with a clean but fatal "free(): invalid pointer" error message.
How severe is CVE-2025-48431?: CVE-2025-48431 has a CVSS 3.x base score of 7.5, rated high severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability high.
Is CVE-2025-48431 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (60th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2025-48431?: CVE-2025-48431 affects Apache Thrift. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2025-48431?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
Does CVE-2025-48431 have an EU (EUVD) identifier?: Yes. CVE-2025-48431 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-209581.
When was CVE-2025-48431 published?: CVE-2025-48431 was published on 2026-04-28 and last updated on 2026-07-01.

References

Affected products (1)

cpe:2.3:a:apache:thrift:*:*:*:*:*:*:*:*

More vulnerabilities in Apache Thrift

CVE-2016-5397 — High (CVSS 8.8): The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an…
CVE-2026-41604 — High (CVSS 8.2): Out-of-bounds Read vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are…
CVE-2026-41636 — High (CVSS 7.5): Uncontrolled Recursion vulnerability in Apache Thrift Node.js bindings This issue affects Apache Thrift: before…
CVE-2026-41602 — High (CVSS 7.5): Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue…
CVE-2020-13949 — High (CVSS 7.5): In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory…
CVE-2019-0210 — High (CVSS 7.5): In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when…

All CVEs affecting Apache Thrift →

Other CWE-762 vulnerabilities

CVE-2025-49080 — High (CVSS 7.5): There is a memory management vulnerability in Absolute Secure Access server versions 9.0 to 13.54. Attackers with…
CVE-2023-45510 — High (CVSS 7.5): tsMuxer version git-2539d07 was discovered to contain an alloc-dealloc-mismatch (operator new [] vs operator delete)…
CVE-2025-20189 — High (CVSS 7.4): A vulnerability in the Cisco Express Forwarding functionality of Cisco IOS XE Software for Cisco ASR 903 Aggregation…
CVE-2023-3648 — Medium (CVSS 5.3): Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or…
CVE-2025-48755 — Low (CVSS 2.9): In the spiral-rs crate 0.2.0 for Rust, allocation can be attempted for a ZST (zero-sized type).
CVE-2025-47737 — Low (CVSS 2.9): lib.rs in the trailer crate through 0.1.2 for Rust mishandles allocating with a size of zero.

Browse all CWE-762 vulnerabilities →