CVE-2026-58023: Apache Thrift: c_glib heap out-of-bounds ad in transport leftover-bytes path
Published Jul 24, 2026
·Updated
Affected Software
1 affected component
Apache Apache Thrift
CVE-2026-58023 has been classified as a high severity vulnerability due to the potential for exploitation leading to out-of-bounds memory access.
To mitigate CVE-2026-58023, update your Apache Thrift installation to the latest version that addresses this vulnerability.
CVE-2026-58023 affects systems running Apache Thrift with the c_glib transport method that allows for heap out-of-bounds access.
You can check your system by reviewing the version of Apache Thrift you are running and comparing it to the versions that have addressed CVE-2026-58023.
Exploitation of CVE-2026-58023 could lead to arbitrary code execution, data corruption, and potential denial of service due to memory manipulation.