CVE-2026-41605: Apache Thrift: Swift Compact Protocol integer overflow
Apache Thrift: Swift Compact Protocol integer overflow
Other sources
Integer Overflow or Wraparound vulnerability in Apache Thrift.
This issue affects Apache Thrift: before 0.23.0.
Users are recommended to upgrade to version 0.23.0, which fixes the issue.
— NVD
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Apache Thriftto a version that resolves this vulnerability.Fixed in 0.23.0
Event History
Frequently Asked Questions
What is the severity of CVE-2026-41605?
CVE-2026-41605 has a medium severity due to the potential for integer overflow vulnerabilities.
How do I fix CVE-2026-41605?
To fix CVE-2026-41605, upgrade Apache Thrift to version 0.23.0 or later.
What products are affected by CVE-2026-41605?
CVE-2026-41605 affects Apache Thrift versions before 0.23.0.
What type of vulnerability is CVE-2026-41605?
CVE-2026-41605 is classified as an integer overflow or wraparound vulnerability.
What should I do if I cannot upgrade immediately for CVE-2026-41605?
If immediate upgrade is not possible for CVE-2026-41605, apply temporary mitigations to limit exposure until the upgrade can be performed.