https://seclists.org/oss-sec/2026/q3/270: CVE-2026-58023: Apache Thrift: c_glib heap out-of-bounds ad in transport leftover-bytes path
Published Jul 24, 2026
·Updated
Affected Software
1 affected component
Apache Thrift<0.24.0
The severity of CVE-2026-58023 is categorized as a critical out-of-bounds read vulnerability.
To fix CVE-2026-58023, users should upgrade to Apache Thrift version 0.24.0 or later.
CVE-2026-58023 affects all versions of Apache Thrift prior to 0.24.0.
CVE-2026-58023 is an out-of-bounds read vulnerability in the c_glib bindings of Apache Thrift.
CVE-2026-58023 was published on July 24, 2026.