{"id":"CVE-2026-85494","published":"2026-10-02T11:17:36.010","lastModified":"2026-10-07T23:17:00.940","description":"Improper handling of length parameter inconsistency, Uncaught exception, Inefficient Algorithmic Complexity, Memory allocation with excessive size value, Initialization of a resource with an insecure default vulnerability in Apache Thrift Python, Ruby, Erlang, Lua, Dart, JavaME, Perl, PHP and D language bindings.\n\n\n\nThis issue affects Apache Thrift: before 0.25.0.\n\n\n\nUsers are recommended to upgrade to version 0.25.0, which fixes the issue.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwes":["CWE-130","CWE-248","CWE-407","CWE-789","CWE-1188"],"vendors":[],"products":[],"references":[{"url":"https://lists.apache.org/thread/33otcgbqd27wf6qq810q56znzbomnhg1","tags":[]},{"url":"https://lists.apache.org/thread/rm0m34gt6fh1flvt16wty559hfg191qr","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"Apache Thrift bindings are vulnerable to memory exhaustion and unhandled exceptions due to improper handling of length parameters and inefficient algorithms, potentially leading to denial of service.","exploitability":"Exploitation requires sending specially crafted data to a Thrift service that uses affected language bindings, with no complex preconditions needed.","blast_radius":"The vulnerability could affect any application using Apache Thrift with Python, Ruby, Erlang, Lua, Dart, JavaME, Perl, PHP or D language bindings, potentially causing widespread service disruption.","remediation":"Upgrade to Apache Thrift version 0.25.0 which fixes the memory allocation and exception handling issues.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["dos","memory-exhaustion","thrift"],"model":"garnet-coder","analyzedAt":"2026-10-12T09:04:13.748Z"}}