<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 01 Oct 2026 22:27:58 +0000</lastBuildDate>
    <item>
      <title>BIT-thrift-2026-55971 — Apache Thrift: C++ ZLIB heap buffer overflow (write) in THeaderTransport::untransform()</title>
      <link>https://vulnerability.circl.lu/vuln/bit-thrift-2026-55971</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Bitnami: thrift&lt;/p&gt;
&lt;p&gt;Heap-based Buffer Overflow vulnerability in Apache Thrift C++ bindings.&lt;/p&gt;
&lt;p&gt;This issue affects Apache Thrift: before 0.24.0.&lt;/p&gt;
&lt;p&gt;Users are recommended to upgrade to version 0.24.0, which fixes the issue.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Bitnami: thrift&lt;/p&gt;
&lt;p&gt;Heap-based Buffer Overflow vulnerability in Apache Thrift C++ bindings.&lt;/p&gt;
&lt;p&gt;This issue affects Apache Thrift: before 0.24.0.&lt;/p&gt;
&lt;p&gt;Users are recommended to upgrade to version 0.24.0, which fixes the issue.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/bit-thrift-2026-55971</guid>
    </item>
    <item>
      <title>fkie_cve-2026-55971</title>
      <link>https://vulnerability.circl.lu/vuln/fkie_cve-2026-55971</link>
      <description>&lt;p&gt;Heap-based Buffer Overflow vulnerability in Apache Thrift C++ bindings.&lt;/p&gt;
&lt;p&gt;This issue affects Apache Thrift: before 0.24.0.&lt;/p&gt;
&lt;p&gt;Users are recommended to upgrade to version 0.24.0, which fixes the issue.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Heap-based Buffer Overflow vulnerability in Apache Thrift C++ bindings.&lt;/p&gt;
&lt;p&gt;This issue affects Apache Thrift: before 0.24.0.&lt;/p&gt;
&lt;p&gt;Users are recommended to upgrade to version 0.24.0, which fixes the issue.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/fkie_cve-2026-55971</guid>
    </item>
    <item>
      <title>GHSA-gwj4-q93m-wwqc</title>
      <link>https://vulnerability.circl.lu/vuln/ghsa-gwj4-q93m-wwqc</link>
      <description>&lt;p&gt;Heap-based Buffer Overflow vulnerability in Apache Thrift C++ bindings.&lt;/p&gt;
&lt;p&gt;This issue affects Apache Thrift: before 0.24.0.&lt;/p&gt;
&lt;p&gt;Users are recommended to upgrade to version 0.24.0, which fixes the issue.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Heap-based Buffer Overflow vulnerability in Apache Thrift C++ bindings.&lt;/p&gt;
&lt;p&gt;This issue affects Apache Thrift: before 0.24.0.&lt;/p&gt;
&lt;p&gt;Users are recommended to upgrade to version 0.24.0, which fixes the issue.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/ghsa-gwj4-q93m-wwqc</guid>
    </item>
    <item>
      <title>openSUSE-SU-2026:11432-1 — libthrift-0_24_0-0.24.0-1.1 on GA media</title>
      <link>https://vulnerability.circl.lu/vuln/opensuse-su-2026:11432-1</link>
      <description>&lt;p&gt;libthrift-0_24_0-0.24.0-1.1 on GA media&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;libthrift-0_24_0-0.24.0-1.1 on GA media&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/opensuse-su-2026:11432-1</guid>
    </item>
    <item>
      <title>RHSA-2026:49715 — Red Hat Security Advisory: RHEL AI 3.5 RPM runtime CVE fix - thrift</title>
      <link>https://vulnerability.circl.lu/vuln/rhsa-2026:49715</link>
      <description>&lt;p&gt;thrift: Apache Thrift C++ bindings: Remote code execution via heap-based buffer overflow&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;thrift: Apache Thrift C++ bindings: Remote code execution via heap-based buffer overflow&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/rhsa-2026:49715</guid>
    </item>
    <item>
      <title>UBUNTU-CVE-2026-55971</title>
      <link>https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-55971</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:20.04:LTS: thrift, Ubuntu:22.04:LTS: thrift, Ubuntu:24.04:LTS: thrift, Ubuntu:26.04:LTS: thrift&lt;/p&gt;
&lt;p&gt;Heap-based Buffer Overflow vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:20.04:LTS: thrift, Ubuntu:22.04:LTS: thrift, Ubuntu:24.04:LTS: thrift, Ubuntu:26.04:LTS: thrift&lt;/p&gt;
&lt;p&gt;Heap-based Buffer Overflow vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-55971</guid>
    </item>
    <item>
      <title>WID-SEC-W-2026-2629 — Red Hat Enterprise Linux AI: Schwachstelle ermöglicht Codeausführung</title>
      <link>https://vulnerability.circl.lu/vuln/wid-sec-w-2026-2629</link>
      <description>&lt;p&gt;Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux AI ausnutzen, um beliebigen Programmcode auszuführen und dadurch möglicherweise die vollständige Kontrolle über das betroffene System zu erlangen, Daten zu kompromittieren oder einen Denial-of-Service-Zustand herbeizuführen.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux AI ausnutzen, um beliebigen Programmcode auszuführen und dadurch möglicherweise die vollständige Kontrolle über das betroffene System zu erlangen, Daten zu kompromittieren oder einen Denial-of-Service-Zustand herbeizuführen.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/wid-sec-w-2026-2629</guid>
    </item>
  </channel>
</rss>
