Vulnerabilities > Facebook > Proxygen > Critical

DATE CVE VULNERABILITY TITLE RISK
2020-05-18 CVE-2020-1897 Use After Free vulnerability in Facebook Proxygen
A use-after-free is possible due to an error in lifetime management in the request adaptor when a malicious client invokes request error handling in a specific sequence.
network
low complexity
facebook CWE-416
critical
9.8
2019-12-04 CVE-2019-11940 Use After Free vulnerability in Facebook Proxygen
In the course of decompressing HPACK inside the HTTP2 protocol, an unexpected sequence of header table resize operations can place the header table into a corrupted state, leading to a use-after-free condition and undefined behavior.
network
low complexity
facebook CWE-416
critical
9.8
2019-07-25 CVE-2019-11921 Out-of-bounds Write vulnerability in Facebook Proxygen
An out of bounds write is possible via a specially crafted packet in certain configurations of Proxygen due to improper handling of Base64 when parsing malformed binary content in Structured HTTP Headers.
network
low complexity
facebook CWE-787
critical
9.8