Known vulnerabilities in thrift

Vendor: OpenAnolis
Software: thrift
Software CPE: cpe:2.3:o:openanolis:thrift:*:*:*:*:*:anolis_os:*:*
Website: https://openanolis.cn/
Total vulnerabilities: 17
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting thrift thrift is affected by 17 known vulnerabilities: 17 medium Critical High Medium Low

Vulnerabilities (17)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU145199 - Improper Validation of Certificate with Host Mismatch
CVE-2026-66053		 CWE-297 Medium
No
No
 0.24.0-1 25.08.2026 SB2026082559
SB2026082589
#VU145194 - Out-of-bounds read
CVE-2026-55970		 CWE-125 Medium
No
No
 0.24.0-1 25.08.2026 SB2026082559
SB2026082589
#VU145193 - Integer overflow
CVE-2026-55969		 CWE-190 Medium
No
No
 0.24.0-1 25.08.2026 SB2026082559
SB2026082589
#VU145192 - Inefficient Algorithmic Complexity
CVE-2026-55968		 CWE-407 Medium
No
No
 0.24.0-1 25.08.2026 SB2026082559
SB2026082589
#VU145191 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-49158		 CWE-409 Medium
No
No
 0.24.0-1 25.08.2026 SB2026082559
SB2026082589
#VU145190 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-48586		 CWE-409 Medium
No
No
 0.24.0-1 25.08.2026 SB2026082559
SB2026082587
SB2026082589
#VU145189 - Improper Validation of Certificate with Host Mismatch
CVE-2026-48145		 CWE-297 Medium
No
No
 0.24.0-1 25.08.2026 SB2026082559
SB2026082589
#VU145187 - Allocation of Resources Without Limits or Throttling
CVE-2026-45112		 CWE-770 Medium
No
No
 0.24.0-1 25.08.2026 SB2026082559
SB2026082587
SB2026082589
#VU145186 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-43871		 CWE-835 Medium
No
No
 0.24.0-1 25.08.2026 SB2026082559
SB2026082589
#VU145185 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-41608		 CWE-409 Medium
No
No
 0.24.0-1 25.08.2026 SB2026082559
SB2026082589
#VU128309 - Integer overflow
CVE-2026-41602		 CWE-190 Medium
No
No
 0.23.0-2 28.04.2026 SB2026042851
SB2026051810
#VU128308 - Improper Validation of Certificate with Host Mismatch
CVE-2026-41603		 CWE-297 Medium
No
No
 0.23.0-2, 0.24.0-1 28.04.2026 SB2026042851
SB2026051810
SB2026082589
#VU128307 - Out-of-bounds read
CVE-2026-41604		 CWE-125 Medium
No
No
 0.23.0-2 28.04.2026 SB2026042851
SB2026051810
#VU128306 - Integer overflow
CVE-2026-41605		 CWE-190 Medium
No
No
 0.23.0-2 28.04.2026 SB2026042851
SB2026051810
#VU128305 - Uncontrolled Recursion
CVE-2026-41606		 CWE-674 Medium
No
No
 0.23.0-2 28.04.2026 SB2026042851
SB2026051810
#VU128304 - Out-of-bounds read
CVE-2026-41607		 CWE-125 Medium
No
No
 0.23.0-2 28.04.2026 SB2026042851
SB2026051810
#VU128303 - Uncontrolled Recursion
CVE-2026-41636		 CWE-674 Medium
No
No
 0.23.0-2 28.04.2026 SB2026042851
SB2026051810
SB2026082613