GitHub Advisoryadvisory · Go

GHSA-wf45-q9ch-q8gh Apache Thrift TFramedTransport Go language implementation has an Integer Overflow or Wraparound vulnerability

HIGH Published 2026-04-28 Modified 2026-05-06 Official page ↗
Aliases
CVE-2026-41602
Ecosystem
Go
Packages
github.com/apache/thrift
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-190
Reviewed
2026-05-06

Affected packages

• Go github.com/apache/thrift: < 0.23.0 → fixed in 0.23.0

Description

Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

Related

Alias · CVE (1)

  • CVE-2026-41602 Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift:… vulnerability

Weakness · CWE (1)

  • CWE-190 Integer Overflow or Wraparound weakness

References