What is CVE-2026-85483?

CVE-2026-85483 is a publicly disclosed cybersecurity vulnerability with a MEDIUM severity rating and CVSS score of 6.3.

How to search for CVE vulnerabilities?

You can search the 4nuxd CVE database using CVE IDs, vendor names, product names, or severity levels.

CVE-2026-85483

MEDIUM6.3/ 10.0

Published: October 2, 2026 at 11:17 AM

Modified: October 2, 2026 at 05:17 PM

Source: security@apache.org

Vulnerability Description

Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

CVSS Metrics

Base Score

6.3

Severity

MEDIUM

Vector String

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X