GHSA-3gv9-wqfp-2rf3

Critical Heap Buffer Overflow in Apache Thrift C++ Transport Exposes Enterprise Microservices to Remote Code Execution (CVE-2026-91135)

A critical heap buffer overflow in Apache Thrift C++ THeaderTransport allows remote adversaries to corrupt memory during ZLIB frame decompression.