Logo
vulnerabilityCVE-2026-45112
Name
CVE-2026-45112
Source
NVD ( link)Debian ( link)
Description
Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: from 0.19.0 before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
thrift
Exploitable

Vulnerability Ratings#


6.9
CVSSv4
7.5
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
0.23.0
Exploitable
yocto
kirkstone
0.16.0
Not Affected
yocto
master
0.24.0
Not Affected
yocto
scarthgap
0.20.0
Exploitable