[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fZkAzhG_29DwCwDpZ1RV_C66XQpcLw7uZK-G2CUMFBTA":3,"g5a-risk:CVE-2025-48431":147},{"success":4,"data":5,"meta":144},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":35,"epssPercentile":26,"epssTimeSeries":36,"severity":37,"affectedProducts":38,"affectedProductsCount":44,"references":45,"referencesCount":82,"weaknesses":83,"weaknessesCount":98,"isActivelyExploited":99,"cisaInfo":26,"otxData":26,"relatedBlogPosts":100,"seoMetadata":101,"configurations":126,"relatedVendorCves":135,"notableEvents":136},"CVE-2025-48431","What is CVE-2025-48431?","Mismatched Memory Management Routines vulnerability in Apache Thrift c_glib language bindings.\n\nThis issue affects Apache Thrift: before 0.23.0.\n\nUsers are recommended to upgrade to version 0.23.0, which fixes the issue.\n\nDescription: Specially crafted requests can crash an c_glib-based Thrift server with a clean but fatal \"free(): invalid pointer\" error message.","Mismatched Memory Management Routines vulnerability in Apache Thrift c_glib language bindings. This issue affects Apache Thrift: before 0.23.0. Users are rec...","2026-04-28T10:16:02.153","2026-10-07T09:10:00.16",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":32,"CVSSMetricV2":33,"CVSSMetricV40":34},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,{"Source":30,"Type":18,"CVSSData":31,"ExploitabilityScore":27,"ImpactScore":28},"0b0ca135-0b70-47e7-9f44-1890c2a1c46c",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},[],[],[],0.01079,[35,35,35,35,35,35,35],"High",[39],{"vendor":40,"product":41,"version":42,"criteria":43,"vulnerable":4},"apache","thrift","*","cpe:2.3:a:apache:thrift:*:*:*:*:*:*:*:*",1,[46,53,57,61,64,67,70,73,76,79],{"url":47,"source":48,"tags":49},"https:\u002F\u002Flists.apache.org\u002Fthread\u002Flb4j0zyd5f3g36cos0wql925przpnwql","Apache",[50,51,52],"Mailing List","Patch","Release Notes",{"url":54,"source":55,"tags":56},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2026\u002F04\u002F28\u002F8","Openwall",[50],{"url":58,"source":59,"tags":60},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24539","Red Hat",[],{"url":62,"source":59,"tags":63},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:25273",[],{"url":65,"source":59,"tags":66},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:27126",[],{"url":68,"source":59,"tags":69},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:28010",[],{"url":71,"source":59,"tags":72},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:36882",[],{"url":74,"source":59,"tags":75},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2025-48431",[],{"url":77,"source":59,"tags":78},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2463410",[],{"url":80,"source":59,"tags":81},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2025\u002Fcve-2025-48431.json",[],10,[84,92],{"id":85,"name":86,"description":87,"extendedDescription":88,"status":89,"abstraction":90,"structure":91},"CWE-762","Mismatched Memory Management Routines","The product attempts to return a memory resource to the system, but it calls a release function that is not compatible with the function that was originally used to allocate that resource.","This weakness can be generally described as mismatching memory management routines, such as:\nWhen the memory management functions are mismatched, the consequences may be as severe as code execution, memory corruption, or program crash. Consequences and ease of exploit will vary depending on the implementation of the routines and the object being managed.","Incomplete","Variant","Simple",{"id":93,"name":94,"description":95,"extendedDescription":96,"status":89,"abstraction":97,"structure":91},"CWE-763","Release of Invalid Pointer or Reference","The product attempts to return a memory resource to the system, but it calls the wrong release function or calls the appropriate release function incorrectly.","This weakness can take several forms, such as:","Base",2,false,[],{"title":102,"metaDescription":103,"keywords":104,"canonicalUrl":105,"structuredData":106},"What is CVE-2025-48431? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2025-48431, a high severity cyber security vulnerability from 2026. Mismatched Memory Management Routines vulnerability in Apac...","CVE-2025-48431, CVE-2025-48431 vulnerability, CVE-2025-48431 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2026, CVSS score, exploit, patch, remediation, apache security, thrift vulnerability","\u002Fwhat-is\u002Fcve-2025-48431",{"@context":107,"@type":108,"headline":102,"description":103,"datePublished":10,"dateModified":11,"author":109,"publisher":113,"about":117,"mainEntityOfPage":121,"articleSection":124,"keywords":125},"https:\u002F\u002Fschema.org","TechArticle",{"@type":110,"name":111,"url":112},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":110,"name":111,"url":112,"logo":114},{"@type":115,"url":116},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":118,"name":6,"description":119,"additionalType":120},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":122,"@id":123},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2025-48431","Cybersecurity","CVE-2025-48431, CVE-2025-48431 vulnerability, CVE-2025-48431 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[127],{"Operator":26,"Negate":26,"Nodes":128},[129],{"Operator":130,"Negate":99,"CPEMatch":131},"OR",[132],{"Vulnerable":4,"Criteria":43,"MatchCriteriaID":133,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":134,"VersionEndIncluding":26},"0CE7604A-DA43-44E3-9840-9E3696223DD5","0.23.0",[],[137],{"id":138,"eventType":139,"eventTime":140,"details":141,"label":142,"color":143},"67c6902f-7d08-40dd-982e-4b8ae3ebd33f","NEW_NVD","2026-05-05T18:24:37.618667+00:00","New CVE added to NVD","Published to NVD","blue",{"lastModified":11,"cacheTime":145,"version":146},1792367988762,"2.0",{"score":148,"band":149,"action":150,"scoredAt":151},47,"Medium","Plan remediation","2026-10-16T07:13:06.471609+00:00"]