Unauthenticated denial of service via size multiplication overflow

Integer overflow in Apache Thrift bindings before 0.24.0 allows remote attackers to interrupt RPC services via crafted collection sizes. In affected bindings, TProtocol::checkReadBytesAvailable multiplies a wire-declared collection count by the minimum serialized element size without first widening the arithmetic, allowing the value to wrap before the remaining-message limit is enforced. No authentication or user interaction is required; successful requests make the affected service unavailable without reported data disclosure or modification.