{"id":"EUVD-2026-27243","revision":"9d21de99d9f54b3f808ed90d0e299aca","records":[{"revision":"9d21de99d9f54b3f808ed90d0e299aca","observedAt":"2026-11-01T07:16:11.203+00:00","statement":{"source":"euvd","id":"EUVD-2026-27243","aliases":["CVE-2026-43868"],"title":"Memory Allocation with Excessive Size Value vulnerability in Apache Thrift.","description":"Memory Allocation with Excessive Size Value vulnerability in Apache Thrift.\n\nThis issue affects Apache Thrift: before 0.23.0.\n\nUsers are recommended to upgrade to version 0.23.0, which fixes the issue.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":7.5,"severity":null}],"references":["https://lists.apache.org/thread/zj76dtwnbbs1m7z3focf4wd51pqpsmn9"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-27243","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"May 5, 2026, 7:49:47 AM","dateUpdated":"Jul 22, 2026, 12:08:40 PM"},"relatedAdvisories":[{"id":"RHSA-2026:26586","title":"Red Hat Security Advisory: Red Hat build of Apache Camel 4.18 for Quarkus 3.33 security update","vulnerabilityIds":["CVE-2026-43868","CVE-2026-43869","CVE-2026-44249","CVE-2026-44893","CVE-2026-45416","CVE-2026-45674","CVE-2026-47691","CVE-2026-48043","CVE-2026-48059","CVE-2026-50010","CVE-2026-50559"]},{"id":"RHSA-2026:42644","title":"Red Hat Security Advisory: RHOAI 2.25.9 - Red Hat OpenShift AI","vulnerabilityIds":["CVE-2024-12224","CVE-2025-14920","CVE-2025-14921","CVE-2025-14924","CVE-2025-14926","CVE-2025-14927","CVE-2025-14928","CVE-2025-14929","CVE-2025-14930","CVE-2025-69227","CVE-2025-69228","CVE-2026-5241","CVE-2026-8643","CVE-2026-11816","CVE-2026-22773","CVE-2026-22807","CVE-2026-23490","CVE-2026-24486","CVE-2026-24779","CVE-2026-25048","CVE-2026-25681","CVE-2026-25960","CVE-2026-25990","CVE-2026-27136","CVE-2026-27145","CVE-2026-27893","CVE-2026-28356","CVE-2026-28684","CVE-2026-32281","CVE-2026-32283","CVE-2026-32597","CVE-2026-32981","CVE-2026-33186","CVE-2026-33236","CVE-2026-33699","CVE-2026-33747","CVE-2026-33811","CVE-2026-33814","CVE-2026-34478","CVE-2026-34480","CVE-2026-34993","CVE-2026-39820","CVE-2026-39821","CVE-2026-39892","CVE-2026-42499","CVE-2026-42504","CVE-2026-42578","CVE-2026-42581","CVE-2026-42584","CVE-2026-42587","CVE-2026-43868","CVE-2026-43869","CVE-2026-44431","CVE-2026-44432","CVE-2026-44660","CVE-2026-48526","CVE-2026-48746","CVE-2026-54293"]},{"id":"msrc_CVE-2026-43868","title":"Apache Thrift: Rust implementation vulnerable to CVE-2020-13949 pattern","vulnerabilityIds":["CVE-2026-43868"]},{"id":"NCSC-2026-0431","title":"Kwetsbaarheden verholpen in IBM DataPower Gateway en onderliggende componenten","vulnerabilityIds":["CVE-2023-53781","CVE-2025-14087","CVE-2025-14512","CVE-2025-21858","CVE-2025-22105","CVE-2025-37980","CVE-2025-38015","CVE-2025-38097","CVE-2025-38180","CVE-2025-38400","CVE-2025-38405","CVE-2025-38441","CVE-2025-38470","CVE-2025-38653","CVE-2025-39766","CVE-2025-39797","CVE-2025-39866","CVE-2025-40134","CVE-2025-48431","CVE-2025-5278","CVE-2025-68183","CVE-2025-68211","CVE-2025-68214","CVE-2025-68347","CVE-2025-68366","CVE-2025-68724","CVE-2025-71066","CVE-2025-71089","CVE-2026-12143","CVE-2026-13257","CVE-2026-13258","CVE-2026-13757","CVE-2026-14269","CVE-2026-14273","CVE-2026-14496","CVE-2026-14497","CVE-2026-14502","CVE-2026-14507","CVE-2026-14508","CVE-2026-14509","CVE-2026-14888","CVE-2026-14905","CVE-2026-14988","CVE-2026-14990","CVE-2026-14991","CVE-2026-14992","CVE-2026-14999","CVE-2026-15588","CVE-2026-15762","CVE-2026-15781","CVE-2026-15784","CVE-2026-15819","CVE-2026-15822","CVE-2026-15824","CVE-2026-16111","CVE-2026-16159","CVE-2026-16161","CVE-2026-16163","CVE-2026-16164","CVE-2026-16165","CVE-2026-16167","CVE-2026-16169","CVE-2026-16170","CVE-2026-16176","CVE-2026-16177","CVE-2026-16178","CVE-2026-16179","CVE-2026-16181","CVE-2026-16182","CVE-2026-16340","CVE-2026-16439","CVE-2026-16440","CVE-2026-16441","CVE-2026-2100","CVE-2026-22979","CVE-2026-22984","CVE-2026-22990","CVE-2026-23002","CVE-2026-23060","CVE-2026-23110","CVE-2026-23204","CVE-2026-23209","CVE-2026-23216","CVE-2026-23243","CVE-2026-23270","CVE-2026-23392","CVE-2026-23455","CVE-2026-2391","CVE-2026-31411","CVE-2026-31419","CVE-2026-31488","CVE-2026-31508","CVE-2026-31532","CVE-2026-31581","CVE-2026-31607","CVE-2026-31613","CVE-2026-31669","CVE-2026-31677","CVE-2026-31684","CVE-2026-31685","CVE-2026-33845","CVE-2026-33846","CVE-2026-3832","CVE-2026-3833","CVE-2026-4046","CVE-2026-41254","CVE-2026-41602","CVE-2026-41606","CVE-2026-41607","CVE-2026-42009","CVE-2026-42010","CVE-2026-42011","CVE-2026-42012","CVE-2026-42013","CVE-2026-42014","CVE-2026-42015","CVE-2026-43027","CVE-2026-43037","CVE-2026-43038","CVE-2026-43056","CVE-2026-43074","CVE-2026-43116","CVE-2026-43125","CVE-2026-43163","CVE-2026-43190","CVE-2026-43198","CVE-2026-43260","CVE-2026-43284","CVE-2026-43303","CVE-2026-43329","CVE-2026-43499","CVE-2026-43501","CVE-2026-43868","CVE-2026-43870","CVE-2026-4437","CVE-2026-4438","CVE-2026-45852","CVE-2026-46054","CVE-2026-46086","CVE-2026-46116","CVE-2026-46173","CVE-2026-46181","CVE-2026-46242","CVE-2026-46259","CVE-2026-46300","CVE-2026-46331","CVE-2026-46333","CVE-2026-46917","CVE-2026-46968","CVE-2026-47010","CVE-2026-47021","CVE-2026-47027","CVE-2026-47059","CVE-2026-47063","CVE-2026-48144","CVE-2026-48145","CVE-2026-5260","CVE-2026-52923","CVE-2026-52991","CVE-2026-53006","CVE-2026-53009","CVE-2026-53131","CVE-2026-53189","CVE-2026-53264","CVE-2026-53266","CVE-2026-5419","CVE-2026-5450","CVE-2026-55602","CVE-2026-55603","CVE-2026-55968","CVE-2026-55970","CVE-2026-58010","CVE-2026-58011","CVE-2026-58012","CVE-2026-58013","CVE-2026-58014","CVE-2026-58015","CVE-2026-58016","CVE-2026-58662","CVE-2026-59879","CVE-2026-59880","CVE-2026-60147","CVE-2026-60589","CVE-2026-61308","CVE-2026-63913","CVE-2026-63952","CVE-2026-64017","CVE-2026-64530","CVE-2026-64560","CVE-2026-70906","CVE-2026-70907","CVE-2026-74581","CVE-2026-82417","CVE-2026-82562","CVE-2026-83605","CVE-2026-83607","CVE-2026-83608","CVE-2026-83613","CVE-2026-83614","CVE-2026-83615","CVE-2026-83616","CVE-2026-83619"]},{"id":"WID-SEC-W-2026-3623","title":"IBM DataPower Gateway: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2023-53781","CVE-2025-14087","CVE-2025-14512","CVE-2025-21858","CVE-2025-22105","CVE-2025-37980","CVE-2025-38015","CVE-2025-38097","CVE-2025-38180","CVE-2025-38400","CVE-2025-38405","CVE-2025-38441","CVE-2025-38470","CVE-2025-38653","CVE-2025-39766","CVE-2025-39797","CVE-2025-39866","CVE-2025-40134","CVE-2025-48431","CVE-2025-5278","CVE-2025-68183","CVE-2025-68211","CVE-2025-68214","CVE-2025-68347","CVE-2025-68366","CVE-2025-68724","CVE-2025-71066","CVE-2025-71089","CVE-2026-12143","CVE-2026-13257","CVE-2026-13258","CVE-2026-13757","CVE-2026-14269","CVE-2026-14273","CVE-2026-14496","CVE-2026-14497","CVE-2026-14502","CVE-2026-14507","CVE-2026-14508","CVE-2026-14509","CVE-2026-14888","CVE-2026-14905","CVE-2026-14988","CVE-2026-14990","CVE-2026-14991","CVE-2026-14992","CVE-2026-14999","CVE-2026-15588","CVE-2026-15762","CVE-2026-15781","CVE-2026-15784","CVE-2026-15819","CVE-2026-15822","CVE-2026-15824","CVE-2026-16111","CVE-2026-16159","CVE-2026-16161","CVE-2026-16163","CVE-2026-16164","CVE-2026-16165","CVE-2026-16167","CVE-2026-16169","CVE-2026-16170","CVE-2026-16176","CVE-2026-16177","CVE-2026-16178","CVE-2026-16179","CVE-2026-16181","CVE-2026-16182","CVE-2026-16340","CVE-2026-16439","CVE-2026-16440","CVE-2026-16441","CVE-2026-2100","CVE-2026-22979","CVE-2026-22984","CVE-2026-22990","CVE-2026-23002","CVE-2026-23060","CVE-2026-23110","CVE-2026-23204","CVE-2026-23209","CVE-2026-23216","CVE-2026-23243","CVE-2026-23270","CVE-2026-23392","CVE-2026-23455","CVE-2026-2391","CVE-2026-31411","CVE-2026-31419","CVE-2026-31488","CVE-2026-31508","CVE-2026-31532","CVE-2026-31581","CVE-2026-31607","CVE-2026-31613","CVE-2026-31669","CVE-2026-31677","CVE-2026-31684","CVE-2026-31685","CVE-2026-33845","CVE-2026-33846","CVE-2026-3832","CVE-2026-3833","CVE-2026-4046","CVE-2026-41254","CVE-2026-41602","CVE-2026-41606","CVE-2026-41607","CVE-2026-42009","CVE-2026-42010","CVE-2026-42011","CVE-2026-42012","CVE-2026-42013","CVE-2026-42014","CVE-2026-42015","CVE-2026-43027","CVE-2026-43037","CVE-2026-43038","CVE-2026-43056","CVE-2026-43074","CVE-2026-43116","CVE-2026-43125","CVE-2026-43163","CVE-2026-43190","CVE-2026-43198","CVE-2026-43260","CVE-2026-43284","CVE-2026-43303","CVE-2026-43329","CVE-2026-43499","CVE-2026-43501","CVE-2026-43868","CVE-2026-43870","CVE-2026-4437","CVE-2026-4438","CVE-2026-45852","CVE-2026-46054","CVE-2026-46086","CVE-2026-46116","CVE-2026-46173","CVE-2026-46181","CVE-2026-46242","CVE-2026-46259","CVE-2026-46300","CVE-2026-46331","CVE-2026-46333","CVE-2026-46917","CVE-2026-46968","CVE-2026-47010","CVE-2026-47021","CVE-2026-47027","CVE-2026-47059","CVE-2026-47063","CVE-2026-48144","CVE-2026-48145","CVE-2026-5260","CVE-2026-52923","CVE-2026-52991","CVE-2026-53006","CVE-2026-53009","CVE-2026-53131","CVE-2026-53189","CVE-2026-53264","CVE-2026-53266","CVE-2026-5419","CVE-2026-5450","CVE-2026-55602","CVE-2026-55603","CVE-2026-55968","CVE-2026-55970","CVE-2026-58010","CVE-2026-58011","CVE-2026-58012","CVE-2026-58013","CVE-2026-58014","CVE-2026-58015","CVE-2026-58016","CVE-2026-58662","CVE-2026-59879","CVE-2026-59880","CVE-2026-60147","CVE-2026-60589","CVE-2026-61308","CVE-2026-63913","CVE-2026-63952","CVE-2026-64017","CVE-2026-64530","CVE-2026-64560","CVE-2026-70906","CVE-2026-70907","CVE-2026-74581","CVE-2026-82417","CVE-2026-82562","CVE-2026-83605","CVE-2026-83607","CVE-2026-83608","CVE-2026-83613","CVE-2026-83614","CVE-2026-83615","CVE-2026-83616","CVE-2026-83619"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2026-27243","identifiers":["EUVD-2026-27243","CVE-2026-43868"]},"retained":false,"historicalAffected":[]}],"coverage":[]}