CVE-2025-48431: apache software foundation apache thrift Mismatched Memory Management Routines
Vulnerability summary
CVE-2025-48431 is a high (CVSS 7.5) Mismatched Memory Management Routines vulnerability in apache software foundation apache thrift. EPSS estimates a 1.08% chance of exploitation in the next 30 days, higher than 64.4% of scored vulnerabilities.
Timeline
- 28-04-2026PublishedVulnerability first disclosed.
- 10-09-2026Last modifiedVulnerability information updated.
Description
Mismatched Memory Management Routines vulnerability in Apache Thrift c_glib language bindings. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue. Description: Specially crafted requests can crash an c_glib-based Thrift server with a clean but fatal "free(): invalid pointer" error message.
CVSS metrics
4 scores · 4 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- NVDNIST7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
1.08%
Chance of exploitation in the next 30 days
Percentile
64%
Versus all other CVEs
30-day change
0.00 pp
From 1.08% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-762Mismatched Memory Management RoutinesThe product attempts to return a memory resource to the system, but it calls a release function that is not compatible with the function that was originally used to allocate that resource.
- CWE-763Release of Invalid Pointer or ReferenceThe product attempts to return a memory resource to the system, but it calls the wrong release function or calls the appropriate release function incorrectly.
Affected systems
Apache1 product
- thrift< 0.23.0
Apache software foundation1 product
- apache thrift< 0.23.0
Debian1 product
- thriftAll versions (No fix recorded) | < 0.23.0-3
Ubuntu1 product
- thriftAll versions (No fix recorded)
4 vendors · 4 products
References
14 links- lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwqlVendor AdvisoryMailing ListPatchRelease Notes
- www.openwall.com/lists/oss-security/2026/04/28/8Mailing List
