CVE-2026-43871: Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TCompactProtocol varint byte-count limit
Overview
- Severity
- High (CVSS 7.5)
- CVSS Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Exploit Status
- Not Exploited
- Patch Tuesday
- 2026-Jul
- Released
- 2026-08-07
- Last Updated
- 2026-08-23
- EPSS Score
- 0.61% (percentile: 47.4%)
Affected Products (6)
Other
- 21398-17084
- 21656-17084
- 21674-17084
- 21631-17084
- 21675-17084
- 21693-17084
Revision History
- 2026-08-07: Information published.
- 2026-08-11: Information published.
- 2026-08-23: Information published.