ZeroDay Findings
Sign inSign up

Findings

CVE-2026-41604

Out-of-bounds Read vulnerability in Apache Thrift.

Published Apr 28, 2026 · updated Sep 9, 2026 · apache thrift

Out-of-bounds Read vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 28, 2026 · NIST NVD

    Detected

    Out-of-bounds Read vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

  2. Sep 9, 2026 · NIST NVD

    Updated

    Out-of-bounds Read vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

Affected

  • cpe apache/thriftversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-41604

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-41604

    Out-of-bounds Read vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

    nvd.nist.gov

References