Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-83632

No fix known EPSS <1%CVSS 9.2

Allocation of resources without limits or throttling, Integer overflow or wraparound, Heap-based buffer overflow vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

Published 2026-10-02 · CVE record · OSV

Products: Apache Software Foundation Apache Thrift

Distro releases

ReleasePackageFixed in
Debian 12thriftno fix
Debian 13thriftno fix
Debian 14thriftno fix
Ubuntu 20.04 LTSthriftno fix
Ubuntu 22.04 LTSthriftno fix
Ubuntu 24.04 LTSthriftno fix
Ubuntu 26.04 LTSthriftno fix
Ubuntu 26.10thriftno fix