Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-07-27T11:09:41 thrift: Apache Thrift C++ bindings: Information disclosure due to buffer over-read vulnerability 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L CWE-125

Buffer Over-read vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.

A flaw was found in Apache Thrift C++ bindings. This buffer over-read vulnerability allows a remote attacker to read beyond the intended memory boundaries. This could lead to the disclosure of sensitive information or cause the application to become unavailable.

This Moderate impact vulnerability in Apache Thrift C++ bindings could lead to information disclosure due to a buffer over-read. Red Hat products utilizing affected versions of Apache Thrift, such as Red Hat Enterprise Linux AI, OpenShift Container Platform, and Red Hat OpenShift AI, may be susceptible if processing untrusted data with Thrift client applications. Confidential Compute Attestation Fix deferred openshift-sandboxed-containers/osc-podvm-payload-rhel9 Red Hat AI Inference Server Fix deferred rhaii/model-opt-cuda-rhel9 Red Hat AI Inference Server Fix deferred rhaiis/model-opt-cuda-rhel9 Red Hat AI Inference Server Fix deferred rhaiis/vllm-cpu-rhel9 Red Hat AI Inference Server Fix deferred rhaiis/vllm-cuda-rhel9 Red Hat AI Inference Server Fix deferred rhaiis/vllm-neuron-rhel9 Red Hat AI Inference Server Fix deferred rhaiis/vllm-rocm-rhel9 Red Hat AI Inference Server Fix deferred rhaiis/vllm-spyre-rhel9 Red Hat AI Inference Server Fix deferred rhaiis/vllm-tpu-rhel9 Red Hat AI Inference Server Fix deferred rhaii/vllm-cpu-rhel9 Red Hat AI Inference Server Fix deferred rhaii/vllm-cuda-rhel9 Red Hat AI Inference Server Fix deferred rhaii/vllm-gaudi-rhel9 Red Hat AI Inference Server Fix deferred rhaii/vllm-neuron-rhel9 Red Hat AI Inference Server Fix deferred rhaii/vllm-rocm-rhel9 Red Hat AI Inference Server Fix deferred rhaii/vllm-spyre-rhel9 Red Hat AI Inference Server Fix deferred rhaii/vllm-tpu-rhel9 Red Hat Enterprise Linux AI (RHEL AI) 3 Fix deferred thrift Red Hat OpenShift AI (RHOAI) Fix deferred rhai/base-image-cpu-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhai/base-image-cuda-12.9-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhai/base-image-cuda-13.0-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhai/base-image-gaudi-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhai/base-image-neuron-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhai/base-image-rocm-6.4-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhai/base-image-rocm-7.0-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhai/base-image-rocm-7.1-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhai/base-image-spyre-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhai/base-image-tpu-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-automl-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-autorag-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-kserve-autogluon-server-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-llama-stack-core-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-llm-d-kv-cache-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-mlserver-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-spark-operator-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-th06-cpu-torch210-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-th06-cpu-torch291-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-th06-cuda130-torch210-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-th06-cuda130-torch291-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-th06-rocm64-torch291-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9 Red Hat OpenShift Container Platform 4 Fix deferred conmon-rs Red Hat OpenShift Container Platform 4 Fix deferred kata-containers Red Hat OpenShift Update Service Fix deferred openshift-update-service/openshift-update-service-rhel8 https://www.cve.org/CVERecord?id=CVE-2026-55970 https://nvd.nist.gov/vuln/detail/CVE-2026-55970 https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9 https://lists.apache.org/thread/8pbnw4dyxxc9opp6qq725jhrzg25v8q7