CVE-2026-58023

An out-of-bounds read vulnerability in Apache Thrift c_glib bindings before version 0.24.0 allows attackers to read memory beyond intended bounds.

This memory corruption flaw in Apache Thrift c_glib bindings could allow attackers to read sensitive data from memory, potentially leading to further exploitation. DIB organizations must ensure their Apache Thrift implementations are patched to version 0.24.0 or later to prevent unauthorized memory access and maintain compliance with NIST 800-171 requirements for patch management.

Shame score — A known memory corruption vulnerability in a widely used open-source library that requires patching, but lacks evidence of malicious exploitation or negligence beyond standard patch management failures.