CVE-2026-55971

Heap-based Buffer Overflow vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.

• CWE-122

• https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9Release Notes
• https://lists.apache.org/thread/xjs36m6kjxpmrmzwck636msg3nvoqnmxVendor Advisory
• http://www.openwall.com/lists/oss-security/2026/07/24/42Mailing List, Third Party Advisory

Published

Jul 27, 2026

Last Modified

Jul 28, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-55964Chain intermediate CA:TRUE without keyCertSign accepted as a…5.3
• CVE-2026-55967AES-GCM encryption/decryption with extremely large cumulativ…7.5
• CVE-2026-55968Inefficient Algorithmic Complexity, Allocation of Resources …7.5
• CVE-2026-55969Integer Overflow or Wraparound vulnerability in Apache Thrif…7.5
• CVE-2026-5597A flaw has been found in griptape-ai griptape 0.19.4. This a…6.3
• CVE-2026-55970Buffer Over-read vulnerability in Apache Thrift C++ bindings…6.5
• CVE-2026-55973In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, whe…7.5
• CVE-2026-55975A vulnerability exists in H.View IP cameras that could allow…8.6
• CVE-2026-55977Successful exploitation of this vulnerability could allow an…3.3
• CVE-2026-55978An improper access control vulnerability in CatchPulse could…8.4
• CVE-2026-55979An improper access control check in CatchPulse's named pipe …5.2
• CVE-2026-5598Covert timing channel vulnerability in Legion of the Bouncy …8.9