Vulnerability Description
Uncontrolled Recursion vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.
Related Weaknesses (CWE)
References
- https://lists.apache.org/thread/2zzkm3mfhfg79ohjo37pg1gms5nto588
- https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9
- http://www.openwall.com/lists/oss-security/2026/10/31/2
FAQ
What is CVE-2026-120135?
CVE-2026-120135 is a documented vulnerability. Uncontrolled Recursion vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.
How severe is CVE-2026-120135?
CVSS scoring is not yet available for CVE-2026-120135. Check NVD for updates.
Is there a patch for CVE-2026-120135?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.