CVE-2026-87117
Received Received - Intake

NULL Pointer Dereference in Apache Thrift PHP Bindings

Publication date: 2026-10-02

Last updated on: 2026-10-02

Assigner: Apache Software Foundation

Description
NULL pointer dereference vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-02
Last Modified
2026-10-02
Generated
2026-10-02
AI Q&A
2026-10-02
EPSS Evaluated
N/A
NVD
CVE-2026-87117
EUVD
EUVD-2026-91399

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
apache thrift to 0.25.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-476 The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a NULL pointer dereference vulnerability in Apache Thrift's PHP bindings. It occurs when the software attempts to access a memory location that is null, which can lead to crashes or unexpected behavior in applications using affected versions.

Detection Guidance

Detection involves checking the Apache Thrift version in use. Commands like 'thrift --version' or inspecting installed packages (e.g., 'dpkg -l | grep thrift' for Debian/Ubuntu or 'rpm -qa | grep thrift' for RHEL-based systems) can identify vulnerable versions.

Impact Analysis

This vulnerability can cause applications using Apache Thrift PHP bindings to crash or become unstable. It may lead to denial of service conditions or potential execution of arbitrary code, depending on the context of the application.

Compliance Impact

This vulnerability is a NULL pointer dereference in Apache Thrift PHP bindings which could lead to denial of service or potential remote code execution. It does not directly impact compliance with GDPR or HIPAA as it is a technical flaw in a library rather than a data protection issue.

Mitigation Strategies

Upgrade Apache Thrift to version 0.25.0 or later immediately. Follow standard upgrade procedures for your system (e.g., package manager commands like 'apt upgrade thrift' or 'yum update thrift').

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-87117. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart