Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-07-27T11:12:40 thrift: Apache Thrift: Information disclosure and denial of service due to out-of-bounds read 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L CWE-125

Out-of-bounds Read vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.

A flaw was found in Apache Thrift c_glib bindings. This out-of-bounds read vulnerability allows an attacker to potentially access sensitive information or cause a denial of service. The vulnerability occurs when the software attempts to read data beyond the allocated memory buffer.

This Moderate severity out-of-bounds read vulnerability in Apache Thrift c_glib bindings could lead to information disclosure and denial of service. Red Hat products such as OpenShift Container Platform, Red Hat OpenShift Update Service, and Confidential Compute Attestation are affected where they utilize vulnerable versions of Apache Thrift. Red Hat Enterprise Linux AI is not affected as the vulnerable code is not present. Confidential Compute Attestation Fix deferred openshift-sandboxed-containers/osc-podvm-payload-rhel9 Red Hat Enterprise Linux AI (RHEL AI) 3 Not affected thrift Red Hat OpenShift Container Platform 4 Fix deferred conmon-rs Red Hat OpenShift Container Platform 4 Fix deferred kata-containers Red Hat OpenShift Update Service Fix deferred openshift-update-service/openshift-update-service-rhel8 https://www.cve.org/CVERecord?id=CVE-2026-58023 https://nvd.nist.gov/vuln/detail/CVE-2026-58023 https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9 https://lists.apache.org/thread/z2myopbovxngfvchdz8hddots9p5ffbt