Mismatched Memory Management Routines vulnerability in Apache Thrift c_glib language bindings. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue. Description: Specially crafted requests can crash an c_glib-based Thrift server with a clean but fatal "free(): invalid pointer" error message.

oracle CPUOct2026: MySQL Cluster >=9.7.0|<=9.7.4

oracle CPUOct2026: MySQL Cluster >=8.0.0|<=8.0.38

oracle CPUOct2026: MySQL Cluster >=8.4.0|<=8.4.13

oracle CPUOct2026: MySQL Cluster >=8.0.0|<=8.0.50

oracle CPUOct2026: MySQL Cluster >=26.7.0|<=26.7.2

oracle CPUOct2026: MySQL Server >=8.4.0|<=8.4.13

oracle CPUOct2026: MySQL Server >=26.7.0|<=26.7.2

oracle CPUOct2026: MySQL Server >=9.7.0|<=9.7.4

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Uncontrolled Recursion vulnerability in Apache Thrift Node.js bindings This issue affects Apache Thrift:
    before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue. (CVE-2026-41636)

  - Mismatched Memory Management Routines vulnerability in Apache Thrift c_glib language bindings. This issue
    affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the
    issue. Description: Specially crafted requests can crash an c_glib-based Thrift server with a clean but
    fatal "free(): invalid pointer" error message. (CVE-2025-48431)

  - Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation
    This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which
    fixes the issue. (CVE-2026-41602)

  - Out-of-bounds Read vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users
    are recommended to upgrade to version 0.23.0, which fixes the issue. (CVE-2026-41604)

  - Integer Overflow or Wraparound vulnerability in Apache Thrift. This issue affects Apache Thrift: before
    0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue. (CVE-2026-41605)

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Mismatched Memory Management Routines vulnerability in Apache Thrift c_glib language bindings. This issue
    affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the
    issue. Description: Specially crafted requests can crash an c_glib-based Thrift server with a clean but
    fatal "free(): invalid pointer" error message. (CVE-2025-48431)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Mismatched Memory Management Routines vulnerability in Apache Thrift c_glib language bindings. This issue     affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the     issue. Description: Specially crafted requests can crash an c_glib-based Thrift server with a clean but     fatal free(): invalid pointer error message. (CVE-2025-48431)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
473159	Alpine: multiple libthrift packages, multiple thrift packages: security update to 0.23.0-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	Local	high
473159	Alpine: multiple libthrift packages, multiple thrift packages: security update to 0.23.0-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	Local	high
462477	Echo: thrift: security update to 0.19.0-4+e1	Tenable Cloud Security	Echo Local Security Checks	Local	high
462477	Echo: thrift: security update to 0.19.0-4+e1	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	high
311096	Linux Distros Unpatched Vulnerability : CVE-2025-48431	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2025-48431

high

Tenable Plugins

Coming Soon

high

high

high

high

high