CVE-2026-55970
CVE-2026-55970 is a medium-severity vulnerability in Apache Thrift with a CVSS 3.x base score of 6.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-126.
Key facts
- Severity: Medium (CVSS 3.x base score 6.5)
- CVSS v4: 6.9
- EPSS exploit prediction: 1% (55th percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-126
- Affected product: Apache Thrift
- Published:
- Last modified:
Description
Buffer Over-read vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.
Frequently asked questions
- What is CVE-2026-55970?
- Buffer Over-read vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.
- How severe is CVE-2026-55970?
- CVE-2026-55970 has a CVSS 3.x base score of 6.5, rated medium severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is low, integrity none, and availability low.
- Is CVE-2026-55970 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (55th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2026-55970?
- CVE-2026-55970 affects Apache Thrift. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2026-55970?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2026-55970 published?
- CVE-2026-55970 was published on 2026-07-27.
References
- https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9
- https://lists.apache.org/thread/8pbnw4dyxxc9opp6qq725jhrzg25v8q7
- http://www.openwall.com/lists/oss-security/2026/07/24/41
Affected products (1)
- cpe:2.3:a:apache:thrift:*:*:*:*:*:*:*:*
More vulnerabilities in Apache Thrift
- CVE-2026-55971 — Critical (CVSS 9.8): Heap-based Buffer Overflow vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before…
- CVE-2026-58662 — Critical (CVSS 9.1): Improper Validation of Specified Quantity in Input, Out-of-bounds Read vulnerability in Apache Thrift C++…
- CVE-2026-58023 — Critical (CVSS 9.1): Out-of-bounds Read vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before…
- CVE-2026-48144 — Critical (CVSS 9.1): Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift c_glib bindings. This issue…
- CVE-2016-5397 — High (CVSS 8.8): The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an…
- CVE-2026-41604 — High (CVSS 8.2): Out-of-bounds Read vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are…
All CVEs affecting Apache Thrift →
Other CWE-126 (Buffer Over-read) vulnerabilities
- CVE-2023-36397 — Critical (CVSS 9.8): Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
- CVE-2025-12106 — Critical (CVSS 9.1): Insufficient argument validation in OpenVPN 2.7_alpha1 through 2.7_rc1 allows an attacker to trigger a heap buffer…
- CVE-2023-51773 — Critical (CVSS 9.1): BACnet Stack before 1.3.2 has a decode function APDU buffer over-read in bacapp_decode_application_data in bacapp.c.
- CVE-2021-34584 — Critical (CVSS 9.1): Crafted web server requests can be utilised to read partial stack or heap memory or may trigger a denial-of- service…
- CVE-2025-36855 — High (CVSS 8.8): A vulnerability ( CVE-2025-21176 https://www.cve.org/CVERecord ) exists in DiaSymReader.dll due to buffer over-read.…
- CVE-2025-21176 — High (CVSS 8.8): .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability