CVE-2026-83632

CVSS 9.2 (critical) · published 2026-10-02

Allocation of resources without limits or throttling, Integer overflow or wraparound, Heap-based buffer overflow vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

Weakness: CWE-122, CWE-190, CWE-770

Source: NVD CVE-2026-83632

References

• https://lists.apache.org/thread/33otcgbqd27wf6qq810q56znzbomnhg1
• https://lists.apache.org/thread/zjv6hjmhl4tb4l4l1dk4bmc2whxh0lb4

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.