EXPOSURES › CVE-2026-55971
CVE-2026-55971
CRITICALApache Thrift C++ bindings before 0.24.0 contain a heap-based buffer overflow vulnerability.
A heap-based buffer overflow in Apache Thrift C++ bindings allows attackers to execute arbitrary code if they can trigger the overflow, posing a severe risk to systems relying on this library. DIB organizations must upgrade to version 0.24.0 immediately to patch this critical flaw and prevent potential exploitation.
Shame score — A critical CVE with a CVSS score of 9.8 indicates a severe, avoidable vulnerability that could lead to remote code execution if exploited.
▸ RECOMMENDED ACTION Remote code execution — patch the affected products on priority.
Heap-based Buffer Overflow vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.