CVE-2026-66081
Received Received - Intake

Access of Uninitialized Pointer in Apache Thrift c_glib

Publication date: 2026-10-02

Last updated on: 2026-10-02

Assigner: Apache Software Foundation

Description
Access of Uninitialized Pointer vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-02
Last Modified
2026-10-02
Generated
2026-10-02
AI Q&A
2026-10-02
EPSS Evaluated
N/A
NVD
CVE-2026-66081
EUVD
EUVD-2026-91588

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
apache thrift to 0.25.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-824 The product accesses or uses a pointer that has not been initialized.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is an access of uninitialized pointer vulnerability in Apache Thrift's c_glib bindings. It affects versions before 0.25.0 and could lead to undefined behavior or crashes due to improper memory handling.

Detection Guidance

Detection involves checking the version of Apache Thrift c_glib bindings. If the version is before 0.25.0, the system is vulnerable. Use commands like 'thrift --version' or check package managers (e.g., 'dpkg -l | grep thrift' for Debian-based systems).

Impact Analysis

An attacker could exploit this to cause denial of service, memory corruption, or potentially execute arbitrary code on systems using vulnerable versions of Apache Thrift's c_glib bindings.

Compliance Impact

The vulnerability involves access to an uninitialized pointer in Apache Thrift c_glib bindings, which could lead to undefined behavior or crashes. This may impact compliance with standards like GDPR or HIPAA if the affected system processes sensitive data, as crashes could disrupt data integrity or availability. However, the provided CVE details do not explicitly link this issue to compliance requirements.

Mitigation Strategies

Upgrade Apache Thrift to version 0.25.0 or later immediately. Follow standard update procedures for your system or package manager. Verify the upgrade with 'thrift --version'.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-66081. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart