CVE-2026-58662

Apache Thrift C++ bindings before 0.24.0 suffer an out-of-bounds read vulnerability that requires upgrading to version 0.24.0.

This out-of-bounds read vulnerability in Apache Thrift C++ bindings allows attackers to read memory beyond intended bounds, potentially exposing sensitive data or enabling further exploitation. DIB organizations must ensure their Apache Thrift implementations are patched to version 0.24.0 or later to mitigate this risk. Failure to patch leaves systems vulnerable to data exposure and potential compromise.

Shame score — A known vulnerability requiring a patch exists, but the lack of timely patching or reliance on outdated versions exposes systems to data exposure risks.