Bug 2463410 (CVE-2025-48431)

Summary:	CVE-2025-48431 Apache Thrift: c_glib: Apache Thrift c_glib: Denial of Service via specially crafted requests
Product:	[Other] Security Response	Reporter:	OSIDB Bzimport <bzimport>
Component:	vulnerability	Assignee:	Product Security <prodsec-ir-bot>
Status:	NEW ---	QA Contact:
Severity:	high	Docs Contact:
Priority:	high
Version:	unspecified	CC:	aazores, alcohan, alinfoot, amctagga, aoconnor, bniver, cmah, dtrifiro, eaguilar, ebaron, eglynn, flucifre, gmeno, gparvin, groman, jbalunas, jjoyce, jkoehler, jolong, jpretori, jschluet, kaycoth, lchilton, lhh, lphiri, mbenjamin, mburns, mgarciac, mhackett, mwringe, pahickey, pjindal, rbryant, rhaigner, rhel-process-autobot, sfeifer, sostapov, vereddy, watson-tool-maintainers, weaton
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	---
Doc Text:	A flaw was found in Apache Thrift c_glib language bindings. A remote attacker could send specially crafted requests to a c_glib-based Thrift server, leading to a mismatched memory management routines vulnerability. This could cause the server to crash with a "free(): invalid pointer" error, resulting in a Denial of Service (DoS).	Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2486178, 2486179
Bug Blocks:

Description OSIDB Bzimport 2026-04-28 10:01:49 UTC

Mismatched Memory Management Routines vulnerability in Apache Thrift c_glib language bindings.

This issue affects Apache Thrift: before 0.23.0.

Users are recommended to upgrade to version 0.23.0, which fixes the issue.

Description: Specially crafted requests can crash an c_glib-based Thrift server with a clean but fatal "free(): invalid pointer" error message.

Comment 3 errata-xmlrpc 2026-06-22 17:15:32 UTC

This issue has been addressed in the following products:

  Cryostat 4 on RHEL 9

Via RHSA-2026:28010 https://access.redhat.com/errata/RHSA-2026:28010