7.5High

CVE-2025-48431Apache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error.

Apache Software Foundation Apache Thrift; Red Hat Cryostat 4 on RHEL 9; Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14; Red Hat Red Hat Advanc… Published: 2026-04-28 12:11 (6 months ago)

Description

Mismatched Memory Management Routines vulnerability in Apache Thrift c_glib language bindings. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue. Description: Specially crafted requests can crash an c_glib-based Thrift server with a clean but fatal "free(): invalid pointer" error message.

Weakness (CWE): CWE-762 CWE-763

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

Vendor	Product	Versions
acm	2.14	—
acm	2.15	—
acm	2.16	—
Apache Software Foundation	Apache Thrift	< 0.23.0
apache	thrift	< 0.23.0
cryostat	4	—
openshift distributed tracing	3.10	—
Red Hat	Cryostat 4 on RHEL 9	all versions
Red Hat	Multicluster Global Hub	—
Red Hat	OpenShift Service Mesh 2	—
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	all versions
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.14	all versions
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.15	all versions
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	all versions
Red Hat	Red Hat AI Inference Server	all versions
Red Hat	Red Hat Ceph Storage 5	—
Red Hat	Red Hat Ceph Storage 6	—
Red Hat	Red Hat Ceph Storage 8	—
Red Hat	Red Hat Ceph Storage 9	—
Red Hat	Red Hat Enterprise Linux 8	—
Red Hat	Red Hat OpenShift AI (RHOAI)	—
Red Hat	Red Hat OpenShift Container Platform 4	all versions
Red Hat	Red Hat OpenShift distributed tracing 3	all versions
Red Hat	Red Hat OpenShift distributed tracing 3.10.2	all versions
Red Hat	Red Hat OpenStack Platform 18.0	—

References and patches

CPE matches (NVD) (1)

cpe:2.3:a:apache:thrift:*:*:*:*:*:*:*:* < 0.23.0

CVSS score

7.5High

Source: CISA-ADP · CVSS 3.1

Attack vector: Network
Attack complexity: Low
Privileges required: None
User interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: None
Availability: High

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

All scores (4)

CISA-ADP	CVSS 3.1	7.5High
redhat-SADP	CVSS 3.1	7.5High
134c704f-9b21-4f2e-91b3-4a467353bcc0	CVSS 3.1	7.5High
0b0ca135-0b70-47e7-9f44-1890c2a1c46c	CVSS 3.1	7.5High

EPSS (chance of exploitation in 30 days)

1.04%

higher than 64% of all CVEs

CISA assessment (SSVC)

Exploitation: none
Automatable: yes
Technical impact: partial

Timeline

ID reserved2025-05-20
Published2026-04-28 12:11
Reached IP-DB2026-10-25 00:00
Last updated2026-10-07 12:10

Assigned by (CNA): apache
NVD status: Modified

View at source: CVE.org · NVD

Get told when these products get a new vulnerability

Turn on email alerts

Free · with an account · switch off any time

Recent CVEs in the same product — Red Hat Enterprise Linux

8.8High

CVE-2026-18379 7 hours ago

Yggdrasil-worker-package-manager: yggdrasil-worker-package-manager: path traversal via unsanitized repo name in addrepo/removerepo

Red Hat Red Hat Enterprise Linux 10

A flaw was found in yggdrasil-worker-package-manager. An authenticated attacker can exploit this issue to achieve arbitrary file modification or potential privilege escalation. The vulnerability exists because repository management operations fail to sanitize…

5.5Medium

CVE-2026-127101 8 hours ago