CVE-2021-24028

Microsoft · Published August 7, 2026

9.8

CVSS v3.1

CRITICAL

Patch availableGet patch

Description

An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code execution or other undesirable effects. This issue affects Facebook Thrift prior to v2021.02.22.00.. An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code execution or other undesirable effects. This issue affects Facebook Thrift prior to v2021.02.22.00.

Affected Products

azl3 thrift 0.15.0-5 on Azure Linux 3.0

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H