CVE-2026-41602: Apache Thrift: Go TFramedTransport uint32 overflow

Modified

AliasesUBUNTU-CVE-2026-41602DEBIAN-CVE-2026-41602CGA-232f-6xpg-p7p3+326 more

Published 28-04-2026Last modified 09-09-2026

Vulnerability summary

CVE-2026-41602 is a high (CVSS 7.5) Integer Overflow or Wraparound vulnerability in apache software foundation apache thrift. EPSS estimates a 1.16% chance of exploitation in the next 30 days, higher than 67.2% of scored vulnerabilities.

Priority

Prioritisesevere

Severe, CVSS 7.5 (CVE.org); no exploitation reported by the 5 checked sources; EPSS 1% (FIRST, 03-11-2026)

Source freshness unavailable

How is this decided?

CVSS score

7.5/10

010

High · v3.1 (CVE.org)

EPSS score

1.16%

0%100%

Low · -0.22 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 8 · Related 9

OPENSUSE-SU-2026:10685-1 OPENSUSE-SU-2026:10744-1 OPENSUSE-SU-2026:20940-1 SUSE-SU-2026:2438-1 SUSE-SU-2026:2768-1 SUSE-SU-2026:2774-1+3 more

Timeline

28-04-2026
PublishedVulnerability first disclosed.
09-09-2026
Last modifiedVulnerability information updated.

Description

Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

CVSS metrics

8 scores · 8 sources · 1 version

v3.17.5

EPSS trend

Probability

1.16%

Chance of exploitation in the next 30 days

Percentile

67%

Versus all other CVEs

30-day change

Decrease -0.22 pp

From 1.38% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-190Integer Overflow or WraparoundThe product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

Affected systems

Version check

Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.

Chainguard171 products

agentbeat< 9.2.7-r9
agentbeat-fips< 9.2.7-r9
amazon-cloudwatch-agent< 1.300068.0-r1
amazon-cloudwatch-agent-fips< 1.300068.0-r1
apm-server-8.19< 8.19.15-r1

apm-server-fips-8.19< 8.19.15-r1
aws-otel-collector< 0.47.0-r15
aws-otel-collector-fips< 0.47.0-r11
bento< 1.17.0-r5
bento-fips< 1.17.0-r3
cadence< 1.4.1-r11
cadence-cassandra-tool< 1.4.1-r11
cadence-fips< 1.4.1-r11
cadence-fips-cassandra-tool< 1.4.1-r11
cadence-fips-server< 1.4.1-r11
cadence-fips-sql-tool< 1.4.1-r11
cadence-server< 1.4.1-r11
cadence-sql-tool< 1.4.1-r11
commercial-expanso-edge< 2.1.19-r0
commercial-grafana-11.6< 11.6.16-r0
commercial-grafana-12.1All versions (No fix recorded)
commercial-grafana-12.2< 12.2.10-r0
commercial-grafana-12.3< 12.3.8-r0
commercial-grafana-12.4< 12.4.5-r0
dapr-daprd-1.14All versions (No fix recorded)
dapr-daprd-1.15< 1.15.14-r15 | < 1.15.14-r16
dapr-daprd-1.16< 1.16.14-r3
dapr-daprd-fips-1.14All versions (No fix recorded)
dapr-daprd-fips-1.15< 1.15.14-r18 | < 1.15.14-r17
dapr-daprd-fips-1.16< 1.16.14-r3
datadog-agent-7.71-fullAll versions (No fix recorded)
datadog-agent-7.72-fullAll versions (No fix recorded)
datadog-agent-7.73-full< 7.73.3-r23
datadog-agent-7.74-full< 7.74.1-r24
datadog-agent-7.75-full< 7.75.4-r7
datadog-agent-7.76All versions (No fix recorded)
datadog-agent-7.76-full< 7.76.3-r19
datadog-agent-7.77-full< 7.77.3-r6
datadog-agent-7.78-full< 7.78.4-r8
datadog-agent-fips-7.71-fullAll versions (No fix recorded)
datadog-agent-fips-7.72-fullAll versions (No fix recorded)
datadog-agent-fips-7.73-full< 7.73.3-r20
datadog-agent-fips-7.74-full< 7.74.1-r26
datadog-agent-fips-7.75-fullAll versions (No fix recorded)
datadog-agent-fips-7.76-full< 7.76.3-r18
datadog-agent-fips-7.77-full< 7.77.3-r7
datadog-agent-fips-7.78-full< 7.78.4-r5
elastic-agent-8.19< 8.19.15-r5
elastic-agent-9.1All versions (No fix recorded)
elastic-agent-9.2< 9.2.8-r9
elastic-agent-9.4< 9.4.1-r2 | < 9.4.1-r0
elastic-agent-fips-8.19< 8.19.15-r4
elastic-agent-fips-9.1All versions (No fix recorded)
elastic-agent-fips-9.2< 9.2.8-r8
elastic-agent-fips-9.4< 9.4.0-r1
elastic-otel-collector-9.3< 9.3.4-r4
elastic-otel-collector-9.4< 9.4.1-r2
elastic-otel-collector-fips-9.3< 9.3.4-r4
falcosidekick< 2.33.0-r6
falcosidekick-fips< 2.33.0-r5
filebeat-8.17< 8.17.10-r20
filebeat-8.19< 8.19.15-r1
filebeat-9.0< 9.0.8-r21
filebeat-9.1< 9.1.10-r15
filebeat-9.2< 9.2.8-r8
filebeat-9.3< 9.3.5-r0
filebeat-9.4< 9.4.2-r0
filebeat-fips-8.17< 8.17.10-r19
filebeat-fips-8.19< 8.19.16-r0
filebeat-fips-9.0< 9.0.8-r22
filebeat-fips-9.1< 9.1.10-r17
filebeat-fips-9.2< 9.2.8-r10
filebeat-fips-9.3< 9.3.4-r5
filebeat-fips-9.4< 9.4.1-r2
grafana-11.6< 11.6.14.04-r3
grafana-12.0All versions (No fix recorded)
grafana-12.1< 12.1.10.01-r22
grafana-12.2< 12.2.8.04-r1
grafana-12.3< 12.3.6.04-r1
grafana-12.4< 12.4.2-r13
grafana-13.0< 13.0.1-r7
grafana-alloy< 1.15.1-r4
grafana-alloy-fips< 1.15.1-r3
grafana-fips-11.6< 11.6.14.04-r1
grafana-fips-12.0All versions (No fix recorded)
grafana-fips-12.1< 12.1.10.01-r12
grafana-fips-12.2< 12.2.8.04-r1
grafana-fips-12.3< 12.3.6.04-r2
grafana-fips-12.4< 12.4.2-r13
grafana-fips-13.0< 13.0.1-r4
jaeger-1-all-in-oneAll versions (No fix recorded)
jaeger-1-collectorAll versions (No fix recorded)
jaeger-1-fips-all-in-oneAll versions (No fix recorded)
jaeger-1-fips-collectorAll versions (No fix recorded)
jaeger-1-fips-ingesterAll versions (No fix recorded)
jaeger-1-fips-queryAll versions (No fix recorded)
jaeger-1-fips-remote-storageAll versions (No fix recorded)
jaeger-1-ingesterAll versions (No fix recorded)
jaeger-1-jaegerAll versions (No fix recorded)
jaeger-1-queryAll versions (No fix recorded)
jaeger-1-remote-storageAll versions (No fix recorded)
jaeger-2-all-in-one-compatAll versions (No fix recorded)
jaeger-2-fips-jaeger< 2.17.0-r5
jaeger-2-fips-queryAll versions (No fix recorded)
jaeger-2-fips-remote-storage< 2.17.0-r5
jaeger-2-remote-storage< 2.17.0-r8
jitsucom-bulker-bulker< 2.11.913-r27
jitsucom-bulker-sidecar< 2.11.913-r27
loki-3.7< 3.7.2-r1
loki-3.7-logcli< 3.7.2-r1
loki-fips-3.7< 3.7.2-r1
loki-fips-3.7-logcli< 3.7.2-r1
milvus-2.5< 2.5.27-r10
milvus-2.6< 2.6.14-r5
minio< 0.20260512.133534-r0
minio-fips< 0.20260512.133534-r0
nri-cassandra-fips< 2.19.0-r1
nri-cassandra-jdk11< 2.19.0-r1
nri-jmx-fips< 3.13.0-r1
nri-jmx-jdk11< 3.13.0-r1
nri-kafka< 3.18.0-r1
nri-kafka-fips< 3.18.0-r1
opentelemetry-collector< 0.152.1-r0
opentelemetry-collector-contrib< 0.149.0-r3 | < 0.151.0-r0
opentelemetry-collector-contrib-fips< 0.151.0-r0
opentelemetry-collector-fips< 0.152.0-r0
peerdb-flow< 0.36.18-r3
plutono< 7.5.49-r1
plutono-fips< 7.5.49-r1
seaweedfs< 4.23-r2
seaweedfs-fips< 4.26-r1
seaweedfs-rocksdb< 4.38-r0
seaweedfs-rocksdb-fips< 4.21-r0
splunk-otel-collector< 0.152.0-r0
splunk-otel-collector-fips< 0.151.0-r1
telegraf-1.35All versions (No fix recorded)
telegraf-1.36< 1.36.4-r17
telegraf-1.37< 1.37.3-r15
telegraf-1.38< 1.38.3-r4
tempo-2.10< 2.10.5-r4
tempo-2.10-cli< 2.10.5-r4
tempo-2.10-query< 2.10.5-r4
tempo-2.10-vulture< 2.10.5-r4
tempo-2.8< 2.8.4-r3
tempo-2.8-cli< 2.8.4-r3
tempo-2.8-query< 2.8.4-r3
tempo-2.8-vulture< 2.8.4-r3
tempo-2.9< 2.9.2-r3
tempo-2.9-cli< 2.9.2-r3
tempo-2.9-query< 2.9.2-r3
tempo-2.9-vulture< 2.9.2-r3
tempo-fips-2.10< 2.10.5-r1
tempo-fips-2.10-cli< 2.10.5-r1
tempo-fips-2.10-query< 2.10.5-r1
tempo-fips-2.10-vulture< 2.10.5-r1
tempo-fips-2.8< 2.8.3-r7
tempo-fips-2.8-cli< 2.8.3-r7
tempo-fips-2.8-query< 2.8.3-r7
tempo-fips-2.8-vulture< 2.8.3-r7
tempo-fips-2.9< 2.9.1-r9
tempo-fips-2.9-cli< 2.9.1-r9
tempo-fips-2.9-query< 2.9.1-r9
tempo-fips-2.9-vulture< 2.9.1-r9
temporal< 1.7.0-r3
temporal-fips< 1.7.0-r3
temporal-server< 1.31.0-r0
temporal-server-fips< 1.30.4-r2
vault-1.21< 1.21.4-r12
vault-2.0< 2.0.0-r2
vault-fips-1.21< 1.21.4-r16
vault-fips-2.0< 2.0.0-r2

Show all 171

Wolfi26 products

amazon-cloudwatch-agent< 1.300068.0-r1
aws-otel-collector< 0.47.0-r15
bento< 1.17.0-r5
dapr-daprd-1.16< 1.16.14-r3
datadog-agent-7.72-fullAll versions (No fix recorded)

Show all 26

Alpine1 product

thrift< 0.23.0-r0

Apache1 product

thrift< 0.23.0

Apache software foundation1 product

apache thrift< 0.23.0

5 vendors · 200 products · Showing 200 of 216

References

23 links

lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwqlVendor AdvisoryAdvisoryWEBMailing ListPatchRelease Notes
www.openwall.com/lists/oss-security/2026/04/28/6WEBMailing List
access.redhat.com/security/cve/CVE-2026-41602VDB EntryX Refsource REDHATAdvisory
bugzilla.redhat.com/show_bug.cgi?id=2463407Issue TrackingX Refsource REDHATREPORT
security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41602.jsonX Sadp Csaf VexWEB
access.redhat.com/errata/RHSA-2026:22423Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2026:22347Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2026:23345Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2026:24503Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2026:36882Vendor AdvisoryX Refsource REDHATAdvisory

Show all 23 references

access.redhat.com/errata/RHSA-2026:24539Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2026:25273Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2026:14162Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2026:14885Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2026:21769Vendor AdvisoryX Refsource REDHATAdvisory
ubuntu.com/security/CVE-2026-41602REPORT
www.cve.org/CVERecord?id=CVE-2026-41602REPORT
security-tracker.debian.org/tracker/CVE-2026-41602Advisory
github.com/CVEProject/cvelistV5/tree/main/cves/2026/41xxx/CVE-2026-41602.jsonAdvisory
nvd.nist.gov/vuln/detail/CVE-2026-41602AdvisoryOval
github.com/apache/thriftPACKAGE
www.suse.com/security/cve/CVE-2026-41602WEB
security.alpinelinux.org/vuln/CVE-2026-41602Advisory