Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TCompactProtocol varint byte-count limit

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-43871 · Microsoft / collected KEV context

GHSA-8wv5-x4w7-5gww

BIT-thrift-2026-43871

PYSEC-2026-3926

cve-program · CVE-2026-43871

• https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9
• https://lists.apache.org/thread/l4dwf14zbyqsmkc28c99ojj3t3gg9qby

nvd · CVE-2026-43871

• https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9
• https://lists.apache.org/thread/l4dwf14zbyqsmkc28c99ojj3t3gg9qby
• http://www.openwall.com/lists/oss-security/2026/07/24/33

osv · GHSA-8wv5-x4w7-5gww

• https://nvd.nist.gov/vuln/detail/CVE-2026-43871
• https://github.com/apache/thrift
• https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9
• https://lists.apache.org/thread/l4dwf14zbyqsmkc28c99ojj3t3gg9qby
• http://www.openwall.com/lists/oss-security/2026/07/24/33

No related operational record is retained in the current change model.