Medium severity6.5NVD Advisory· Published Apr 28, 2026· Updated Apr 28, 2026
CVE-2026-41607
CVE-2026-41607
Description
Out-of-bounds Read vulnerability in Apache Thrift.
This issue affects Apache Thrift: before 0.23.0.
Users are recommended to upgrade to version 0.23.0, which fixes the issue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5- osv-coords3 versionspkg:bitnami/thriftpkg:rpm/opensuse/grafana&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/thrift&distro=openSUSE%20Tumbleweed
< 0.23.0+ 2 more
- (no CPE)range: < 0.23.0
- (no CPE)range: < 11.6.14+security04-4.1
- (no CPE)range: < 0.23.0-1.1
Patches
Vulnerability mechanics
References
2- lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwqlnvdMailing ListPatchRelease Notes
- www.openwall.com/lists/oss-security/2026/04/28/2nvdMailing List
News mentions
0No linked articles in our index yet.