CVE-2026-96287: Apache Thrift: Perl `FramedTransport` reads and TLS socket writes re-slice the remaining buffer on every call (quadratic)

Overview

Severity
N/A
Exploit Status
Not Exploited
Patch Tuesday
2026-Oct
Released
2026-10-04
Last Updated
2026-10-05
EPSS Score
0.43% (percentile: 34.6%)

Affected Products (1)

Other

  • 0-17084

Revision History

  • 2026-10-04: Information published.
  • 2026-10-05: Information published.