CVE-2026-94652

Published: Ott 02, 2026 Last Modified: Ott 02, 2026

ExploitDB:

Other exploit source:

Google Dorks:

MEDIUM 6,3

Source: [email protected]

Attack Vector: network

Attack Complexity: low

Privileges Required: none

User Interaction: none

Confidentiality: N/A

Integrity: N/A

Availability: N/A

AI Translation Available

Missing release of memory after effective lifetime vulnerability in Apache Thrift c++ bindings.

This issue affects Apache Thrift: before 0.25.0.

Users are recommended to upgrade to version 0.25.0, which fixes the issue.

401

Draft

Abstraction: Variant Structure: Simple

Security Scopes Affected:

Availability Other

Potential Impacts:

Dos: Crash, Exit, Or Restart Dos: Instability Dos: Resource Consumption (Cpu) Dos: Resource Consumption (Memory) Reduce Performance

Languages: Not Language-Specific, C, C++

Likelihood of Exploit: Medium

https://lists.apache.org/thread/33otcgbqd27wf6qq810q56znzbomnhg1

https://lists.apache.org/thread/nodwz7gjvogkkh3w1jwbsslk1c7t0727